Lucene search
+L

11210 matches found

CVE
CVE
added 2026/09/14 12:45 a.m.7 views

CVE-2026-90610

CVE-2026-90610 is a buffer over-read (heap, size 20) in the function gf_svg_attributes_copy within scenegraph/svg_attributes.c , part of the MP4Box component of the GPAC media framework. The flaw is reachable with local access and low privileges , requiring no user interaction. Impact is limited ...

4.8CVSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.2 views

PT-2026-91002

A vulnerability was found in GPAC up to f1219cde. This affects the function gf svg attributes copy of the file scenegraph/svg attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made publi...

4.8CVSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/13 4:43 p.m.6 views

CVE-2026-14856-TastyIgniter

CVE-2026-14856: XSS Almacenado a Toma de Control de Cuenta en TastyIgniter v4.3.0 📌 Resumen Se identificó una vulnerabilidad de Cross-Site Scripting XSS Almacenado en la funcionalidad de carga de archivos del Media Manager de TastyIgniter v4.3.0. Debido a una validación y saneamiento insuficiente...

6.3CVSS5.8AI score0.00286EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.90 views

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

9.1CVSS5.8AI score0.01792EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.26 views

SiYuan <= v3.5.9 - Cross Site Scripting

SiYuan v3.5.10 contains a reflected XSS caused by improper sanitization of javascript: href attributes allowing ASCII control characters to bypass prefix checks in SVG sanitizer, letting unauthenticated attackers execute JavaScript via /api/icon/getDynamicIcon. id: CVE-2026-31809 info: name: SiYu...

6.4CVSS8AI score0.00505EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.103 views

SiYuan <= v3.5.9 - SVG Animate Element XSS

SiYuan = v3.5.9 contains a reflected XSS caused by insufficient SVG sanitization allowing SVG animation elements to inject executable JavaScript in /api/icon/getDynamicIcon endpoint, letting unauthenticated attackers execute scripts. id: CVE-2026-31807 info: name: SiYuan = v3.5.9 - SVG Animate...

6.4CVSS8AI score0.00445EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.26 views

SiYuan Note - Cross-Site Scripting

Unauthenticated reflected cross-site scripting XSS vulnerability in all versions of SiYuan Note containing /api/icon/getDynamicIcon with unsafe type=8 rendering logic. Attacker-controlled content is inserted directly into SVG output without proper sanitization. An attacker can execute arbitrary...

9.3CVSS8.1AI score0.00625EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.83 views

Imgproxy < 3.14.0 - Cross-site Scripting (XSS)

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. id: CVE-2023-1496 info: name: Imgproxy 3.14.0 - Cross-site Scripting XSS author: pdteam severity: medium description: Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to...

6.5CVSS6.3AI score0.01585EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 3:31 p.m.5 views

CVE-2020-29599

CVE-2020-29599 librería ImageMagick de Artifex Artifex versión 6.9.11-40 y 7.0.10-40 archivos SVG serán convertidos a imágenes...

7.8CVSS7.1AI score0.07508EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:26 p.m.7 views

CVE-2022-32074

CVE-2022-32074 for osTicket | 支持工单系统 root@kitploit: 1. Find the file listing directory, the root of the file download directoryм fileuploads this is an example. 2. Load the following xssPayload.svg and open it 示例:...

5.4CVSS6AI score0.01455EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:45 p.m.6 views

CVE-2023-43838

CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: root@kitploit:...

7.8CVSS7.5AI score0.00576EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 2:37 p.m.5 views

CVE-2023-33977

CVE-2023-33977 kiwitcms/kiwi 中通过 SVG 上传导致的存储型 XSS - 作者:M Nadeem Qazi 描述 本仓库针对在 kiwitcms/kiwi 应用中发现并被分配了 CVE-2023-33977 标识符的存储型 XSS 漏洞进行了说明。该漏洞允许通过 SVG 文件上传执行恶意脚本。当上传包含恶意载荷的 SVG 文件时,脚本会在受害者浏览器的上下文中执行,可能导致数据窃取、账户失陷以及恶意软件的传播。 概念验证 有关此漏洞的详细概念验证可参阅以下视频: 影响 该漏洞影响重大,对 kiwitcms/kiwi...

8.1CVSS6.8AI score0.0087EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 1:53 p.m.4 views

CVE-2025-51858

CVE-2025-51858 漏洞描述 ChatPlayground.ai 是一款用于比较 AI 模型的流行 Web 应用程序。其聊天组件存在跨站脚本 XSS 漏洞,可导致 JWT 令牌窃取和远程账户劫持。此外,/api/chat-history 端点存在弱访问控制 IDOR。攻击者可利用此 IDOR,通过 JWT 令牌中的用户名访问受害者的聊天历史,即使在 JWT 令牌过期后也可导致隐私数据泄露。 攻击向量 ChatPlayground.ai 是一款用于比较 AI 模型的流行 Web 应用程序。在 ChatPlayground.ai(一个流行的 AI 模型比较平台)的聊天组件...

6.1CVSS6.4AI score0.00281EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:48 p.m.8 views

ImageTragick-CVE-2016-3714-RShell

ImageTragick-CVE-2016-3714-RShell 这些是利用bash、nc、php等工具构建反向Shell的CVE-2016-3714 mvg/svg POC。 声明 仅供研究和道德黑客使用…… 用法 1. 服务器端:nc -l - p 端口号 2. 将图片上传到漏洞站点 致谢 感谢virgoTeam的ding提供的php反向Shell POC 参考 https://imagetragick.com/ root@kitploit: jpeanut@VirgoTeam...

10CVSS6.8AI score0.97485EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/13 1:31 p.m.11 views

CVE-2025-50738-PoC

CVE-2025-50738 这非常简单,通过SVG实现存储型XSS是野外发现跨站脚本漏洞的常见方式,所以这是我首先尝试的方法之一。 我通过Pikapods部署了usememos,然后导航到首页并创建了一个账户。 使用该账户,我创建了一个"想法": 然后我创建了一个SVG文件,包含以下payload: root@kitploit: 该payload执行JavaScript,导致打印'document.domain'(所以它只显示'.pikapod.net')。 我选择了文件,在本例中它叫xss6.svg,然后我可以"复制图片地址":...

9.8CVSS6AI score0.02077EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 1:08 p.m.8 views

CVE-2024-7703

CVE-2024-7703 root@kitploit: Exploit CVE-2024-7703: Cross-Site Scripting XSS Almacenado mediante Carga de Archivos SVG en el Plugin ARMember de WordPress Descripción general Este repositorio contiene un exploit de prueba de concepto PoC para la vulnerabilidad identificada como CVE-2024-7703. La...

6.4CVSS6AI score0.01142EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 12:44 p.m.10 views

svg_phishing_tools

Kit de herramientas de análisis de seguridad SVG - Documentación de la herramienta Este kit de herramientas contiene herramientas Python especializadas para analizar archivos SVG potencialmente maliciosos y detectar mecanismos de seguridad. Resumen El kit consta de cuatro herramientas principales...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.7 views

CVE-2022-32060

Snipe-IT 版本 v6.0.2 漏洞说明: Snipe-IT v6.0.2 的更新品牌设置组件中存在任意文件上传漏洞,攻击者可通过构造的文件执行任意代码。 攻击向量: 我们发现了一个文件上传漏洞,当在更新品牌设置页面上传恶意文件时触发。 Payload: https://github.com/bypazs/GrimTheRipper/blob/main/GrimTheRipperTeam.svg 测试环境: 1. Snipe-IT 版本 v6.0.2 2. Google Chrome 版本 102.0.5005.61 官方构建 64位 受影响组件:...

4.8CVSS5.7AI score0.01166EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/13 11:08 a.m.4 views

CVE-2023-39115

CVE-2023-39115 Descripción: Campcodes Online Matrimonial Website System Script v3.3 es vulnerable a una vulnerabilidad de carga arbitraria de archivos, lo que potencialmente permite a los atacantes ejecutar código arbitrario en el servidor objetivo. La vulnerabilidad surge de una validación...

9.8CVSS8.7AI score0.07883EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 9:54 a.m.8 views

CVE-2025-61183

CVE-2025-61183 Stored XSS in User Avatar Upload via Unsafe SVG Handling Overview A Stored Cross-Site Scripting XSS vulnerability was identified in the vaahcms, specifically within the interaction between the file upload logic in MediaController.php and the storeAvatar method in UserBase.php,...

6.1CVSS5.8AI score0.00299EPSS
SaveExploits2
Rows per page
Query Builder