CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Big Blue Button에서 Libreoffice 파일 유출 취약점에 대한 개념 증명 이 ODT 파일들은 서버 측 Libreoffice 렌더링예: BigBlueButton에서 발생할 수 있는 파일 유출 취약점을 악용하는 방법을 보여줍니다. 배경: https://blog.hboeck.de/archives/902-File-Exfiltration-via-Libreoffice-in-BigBlueButton-and-JODConverter.html...

Astro SSR - Open Redirect

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. id: CVE-2025-54793...

hono: hono/jsx: Cross-Site Scripting via Unescaped Strings

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

CVE-2025-55182-Proof-of-Concept

CVE-2025-55182 개념 증명PoC 이 저장소는 특정 서버 사이드 렌더링 구현에서 원격 코드 실행RCE으로 이어지는 프로토타입 오염Prototype Pollution 취약점인 CVE-2025-55182 에 대한 개념 증명PoC을 포함합니다. ⚠️ 경고: 이 PoC는 교육, 연구 및 개인 또는 통제된 환경에서의 승인된 보안 테스트 목적으로만 엄격히 사용해야 합니다. 허가 없이 시스템에 무단으로 사용하는 것은 불법입니다. 취약점 개요 이 취약점은 검증되지 않은 사용자 입력이 내부 JavaScript 객체 구조에 주입될 때...

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Summary hono/jsx does not HTML-escape a plain string placed directly as a child or fallback of Suspense or ErrorBoundary, as the only child of a Context.Provider, or as the root value of renderToString / renderToReadableStream from hono/jsx/dom/server. Such a string is emitted as markup instead o...

Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8. When @angular/router parses incoming request URLs, it extracts path segments, matrix parameters, and child outlets into plain JavaScript objects Record. When matrix...

hono: hono/jsx: Cross-Site Scripting via Unescaped Strings

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

hono: hono/jsx: Cross-Site Scripting via Unescaped Strings

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

Infinite loop

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Infinite loop via the afterdoctypenamestate handler in Domino's HTML parser lib/HTMLParser.js, used by @angular/platform-server for server-side rendering. Whe...

EUVD-2026-75681

Angular SSR: XSS via Unescaped Processing Instruction Nodes in Fallback Raw-Content Elements...

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization of ProcessingInstruction DOM nodes , nodeType === 7 when nested inside fallback raw-content elements , , , . While processing instruction data escaped to , it did not check for or...

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 XSS 취약점을 재현하기 위한 간단한 PoC 단계 npm i npm run start localhost:3006으로 이동...

Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865

React Router에 오신 것을 환영합니다! React Router를 사용하여 풀스택 React 애플리케이션을 구축하기 위한 현대적이고 프로덕션 준비가 된 템플릿입니다. 기능 🚀 서버 사이드 렌더링 ⚡️ 핫 모듈 리플레이스먼트 HMR 📦 에셋 번들링 및 최적화 🔄 데이터 로딩 및 변형 🔒 기본값으로 TypeScript 🎉 스타일링을 위한 TailwindCSS 📖 React Router 문서 시작하기 설치 의존성을 설치합니다: npm install 개발 HMR과 함께 개발 서버를 시작합니다: npm run dev 애플리케이션은...

xwiki-cve-2025-24893

XWiki SolrSearch Unauthenticated RCE CVE-2025-24893 Contributors 화이트햇 스쿨 4기 25반 임두연@endusdksla 요약 XWiki는 위키 문법과 매크로를 서버 측에서 해석해 렌더링한다. 문제는 Main.SolrSearch 페이지가 게스트에게 열려 있으면서도, 사용자 입력인 text 파라미터를 충분한 검증 없이 XWiki 문법으로 평가한다는 점이다. 공격자는 text에 groovy 매크로를 삽입해 서버에서 임의의 Groovy 코드를 실행할 수 있고,...

hono: hono/jsx: Cross-Site Scripting via Unescaped Strings

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

Linux Distros Unpatched Vulnerability : CVE-2026-93981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an...

CVE-2026-93981

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

Duplicate Advisory: hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hxh3-vqpv-xpqv. This link is maintained to preserve external references. Original Description hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a...

CVE-2026-93981

hono/jsx (a server-side rendering component of the hono web framework) before version 4.13.7 fails to HTML-escape plain strings in several rendering paths: child or fallback of Suspense , string child of ErrorBoundary alongside an async sibling, the single child of Context.Provider , and the root...

CVE-2026-93981 hono/jsx before 4.13.7 Cross-Site Scripting via Unescaped Strings

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibling, as the single child of a Context.Provider, or as the root value passed to renderToString or renderToReadableStream...