CVE-2026-79816

A DOM-based cross-site scripting (XSS) vulnerability exists in the client interface of HPE Networking ClearPass Policy Manager . This flaw allows an unauthenticated remote attacker to execute arbitrary script code within a victim's browser context while using the affected client interface. No spe...

CVE-2026-79816 Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

EUVD-2026-93902

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

EUVD-2026-93886

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2026-79799 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2026-79799 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2026-79799

A vulnerability in the ClearPass Policy Manager web-based management interface allows an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. This flaw targets administrative users of the interface, potentially enabling the execution of arbitrary script code with...

CVE-2026-106444

The Handlebars templating engine (versions 4.0.0 through 4.7.10 ) is vulnerable to JavaScript Injection due to improper escaping in the Handlebars.precompile() function. Specifically, lib/handlebars/compiler/code-gen.js uses quotedString() to emit static template text without escaping sequences t...

CVE-2026-106444 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

CVE-2026-106444

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

CVE-2026-106444 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

CVE-2026-106444

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

Kerberos_CVE-2022-33679

KerberosCVE-2022-33679 المتطلبات impacket==0.10.0 arc4==0.3.0 حالة الاستخدام: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName...

Microsoft-2024-December-Update-Control

विंडोज दिसंबर 2024 सुरक्षा पैच ऑडिट स्क्रिप्ट यह PowerShell स्क्रिप्ट, दिसंबर 2024 Microsoft सुरक्षा बुलेटिन में घोषित विशिष्ट सुरक्षा कमजोरियों CVE-2024-49124, CVE-2024-49117, CVE-2024-49118 और CVE-2024-49122 के लिए आवश्यक KB अपडेट की जाँच करती है कि वे आपके सिस्टम पर इंस्टॉल हैं या नहीं।...

cve-2020-5902

F5 BIG-IP "TMUI" RCE 취약점용 NMAP 스크립트 참조:https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse...

CVE-2022-27925

CVE-2022-27925 Installation git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Utilisation usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list...

CVE-2020-1472-Easy

CVE-2020-1472-Easy هذا بالتأكيد ليس شيئًا تريد تشغيله على أي شيء تهتم لأمره. مبني من كتابة فنية وعمل من @obfuscatee ومصدر آخر يستخدم كودًا من https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472 https://github.com/VoidSec/CVE-2020-1472...

monikerlinktest

monikerlinktest cve-2024-21413 1. configurer tun0 ou un autre tun sur le routeur via openvpn avec n'importe quel fichier ovpn 2. installer remmina si ce n'est pas déjà fait 3. se connecter en RDP au bureau cible en utilisant remmina sur le port auquel votre ovpn est connecté supprimer le lien ip ...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 مثال لرمز PHP لاستغلال PoC لثغرة CVE-2017-5638 الاستخدام php exploit.php "http://127.0.0.1:8080/example/index.action" "command" استخدم على مسؤوليتك الخاصة...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 التحقق من صدى تنفيذ الكود عن بُعد تقرير فريقنا حول تحليل الثغرة CVE-2017-7269: https://ht-sec.org/cve-2017-7269-vulnerabilities/ الـ PoC الافتراضي يفتح calc.exe فقط، الآن تم تعديله ليستجيب للطلبات، وصيغة الأمر هي: CVE-2017-7269remoteecho.py ipaddress port التأثير كما يلي:...