react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 用于复现 XSS 漏洞的简单 PoC 步骤 npm i npm run start 访问 localhost:3006...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Big Blue Button 中 LibreOffice 文件外泄漏洞的概念验证 这些 ODT 文件展示了如何利用服务器端 LibreOffice 渲染（例如 BigBlueButton）中可能发生的文件外泄漏洞。 背景： https://blog.hboeck.de/archives/902-File-Exfiltration-via-Libreoffice-in-BigBlueButton-and-JODConverter.html...

Astro SSR - Open Redirect

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. id: CVE-2025-54793...

Linux Distros Unpatched Vulnerability : CVE-2026-88058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...

Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865

欢迎使用 React Router！ 一个现代、生产就绪的模板，用于使用 React Router 构建全栈 React 应用程序。 功能特性 🚀 服务端渲染 ⚡️ 热模块替换（HMR） 📦 资源打包与优化 🔄 数据加载与变更 🔒 默认使用 TypeScript 🎉 TailwindCSS 样式支持 📖 React Router 文档 快速开始 安装 安装依赖： root@kitploit: npm install 开发 使用 HMR 启动开发服务器： root@kitploit: npm run dev 你的应用将在 http://localhost:5173 上可用。 生产构建...

CVE-2026-88060

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

DEBIAN-CVE-2026-88058

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

CVE-2026-88058

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060

Angular server-side rendering in @angular/platform-server (prior to 20.3.30, 21.2.22, and 22.1.4) serializes untrusted input inside content nested in fallback raw-content elements such as noscript , iframe , noembed , and noframes . The Domino serializer's fallbackRawContentTags traversal stoppe...

CVE-2026-88059

Angular's @angular/common HttpTransferCache can leak authenticated responses when Server-Side Rendering uses a hierarchical HttpClient with withRequestsMadeViaParent. The child TransferCache evaluates a request as anonymous before a parent interceptor injects credentials (Authorization header, co...

CVE-2026-88056

Angular's @angular/platform-server is vulnerable to SSRF and cross-origin credential disclosure prior to versions 20.3.30, 21.2.22, and 22.1.4 . The root cause is that the resolveUrl and parseUrl utilities invoked String.prototype.trim(), which strips leading Unicode whitespace (e.g. U+00A0, U+FE...

PT-2026-89700

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...

CVE-2025-55182-Proof-of-Concept

CVE-2025-55182 概念验证 此仓库包含 CVE-2025-55182 的概念验证 PoC，该漏洞涉及某些服务器端渲染实现中的原型污染导致远程代码执行 RCE 。 ⚠️ 警告： 此 PoC 仅用于教育、研究以及在个人或受控环境中的授权安全测试。未经许可在系统上使用是非法的。 漏洞概述 当未经验证的用户输入被注入到内部 JavaScript 对象结构（原型污染）时，就会发生此漏洞。当与特定的执行流程结合时，可能导致任意代码执行 。 在此 PoC 中，使用链式属性（如 proto 和 constructor）将污染升级为执行上下文。 概念验证 下面是...

CVE-2026-84685 Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management

The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering SSR environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory...

xwiki-cve-2025-24893

XWiki SolrSearch 未认证 RCE CVE-2025-24893 贡献者 白帽学校 4期 25班 林斗妍@endusdksla 摘要 XWiki 在服务器端解析并渲染 wiki 语法和宏。问题在于 Main.SolrSearch 页面不仅对访客开放，而且还将用户输入的 text 参数在没有充分验证的情况下作为 XWiki 语法进行评估。 攻击者可以在 text 中插入 groovy 宏，从而在服务器上执行任意 Groovy 代码，并通过 "command".execute 调用操作系统命令。此漏洞无需额外登录或令牌，仅通过单个 GET 请求即可利用。 环境配置 本目录使用官...

CVE-2026-16231

hbs , an Express view engine wrapping Handlebars, has a cross-site scripting vulnerability in its registerAsyncHelper API. An async helper returns an opaque placeholder during the first render pass, so Handlebars' double-brace escaping applies only to the placeholder. After rendering, hbs substit...

EUVD-2026-58727

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

PT-2026-72055

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...