CVE-2026-64638

XSS2Shell アラートPoC CVE-2026-64638 WordPress 事前認証リフレクション型XSSの概念実証 WordPress Core の CVE-2026-64638 XSS2Shell パーサー差分XSSに対する単一ファイルのHTML概念実証です。細工されたログインリクエストを介して、WordPress オリジン上で認証なしの JavaScript 実行を実証します。 脆弱性情報 CVE : CVE-2026-64638 XSS2Shell 種別 : 事前認証リフレクション型XSS（パーサー差分: striptags vs wpksespost） 昇格 : RC...

CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – Suite de seguridad WordPress XSS2Shell ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, blue teams y probadores de penetración. El acceso no autorizado a sistemas informáticos e...

CVE-2023-24329-lab

CVE-2023-24329 — Laboratorio di Differenze di Parsing Solo a scopo didattico. Questo laboratorio esiste per dimostrare una vulnerabilità reale in un ambiente sicuro e isolato. Non eseguirlo mai contro sistemi che non possiedi. Non riutilizzare mai il codice di filtro volutamente difettoso in alcu...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth-XSS → RCE-Exploit-Kette, basierend auf Forschung von pwn.ai, veröffentlicht auf ionsec.io. ⚠️ RECHTLICHER HINWEIS : Nur für BILDUNGSZWECKE und AUTORISIERTE TESTS. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

xss2shell-check

xss2shell-check Rilevatore non distruttivo e senza dipendenze per la primitiva di riflessione CVE-2026-64638 "XSS2Shell" in WordPress wp-login.php. Contesto CVE-2026-64638 è una XSS riflessa pre-autenticazione nel core di WordPress , divulgata da PWN.AI il 2026-08-07 CVSS 8.9, CWE-79 e corretta...

CVE-2026-6827

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CVE-2026-5751

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

EUVD-2026-64655

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CVE-2026-6827 justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CVE-2026-5751

justhtml versions 1.13.0 and earlier are affected by a parser-differential / mutation XSS (mXSS) vulnerability. The issue occurs when a custom SanitizationPolicy preserves foreign namespaces (e.g., drop_foreign_namespaces=False with allowlisted SVG/MathML elements or raw-text containers such as )...

CVE-2026-5751 justhtml before 1.14.0 Mutation XSS via custom sanitization policies

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

EUVD-2026-64654

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

CVE-2026-5751 justhtml before 1.14.0 Mutation XSS via custom sanitization policies

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell Reflektiertes XSS vor der Authentifizierung → Remote-Codeausführung im WordPress-Core ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient ausschließlich autorisierten Sicherheitsforschungs- und Bildungszwecken. Verwenden Sie es nicht gegen Systeme, die Ihnen nicht gehören ode...

CVE-2026-54134

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-54134

OctoPrint (web interface for 3D printers) versions prior to 1.11.8 and 2.0.0rc3 are vulnerable to file exfiltration via parser differentials between its custom Tornado upload handler and Flask/Werkzeug. An attacker with FILE_UPLOAD permission can inject reserved internal form fields through query...

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-67201 V 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery SSRF bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a URL containing a backslash in the authori...