pax

pax 재미와 이익을 위해 패딩 오라클을 익스플로잇하세요! Pax PAdding oracle eXploiter는 패딩 오라클을 익스플로잇하기 위한 도구로, 다음을 수행합니다: 1. 주어진 CBC 암호화 데이터에 대한 평문을 얻습니다. 2. 오라클이 사용하는 알 수 없는 암호화 알고리즘을 사용하여 주어진 평문에 대한 암호화된 바이트를 얻습니다. 이것은 암호화된 세션 정보를 노출하는 데 사용될 수 있으며, 종종 인증을 우회하고, 권한을 상승시키며, 사용자 정의 평문을 암호화하여 서버에 다시 써서 원격으로 코드를 실행하는 데...

CVE-2023-25292

CVE-2023-25292 I ntermesh BV Group-Office バージョン 6.6.145 における Reflected Cross Site Scripting XSS。攻撃者は GOLANGUAGE クッキーを介して権限を昇格させ、機密情報を取得することが可能です。 脆弱性の詳細 製品: Group Office アプリケーション バージョン: 6.6.145 脆弱性タイプ: Reflected XSS 深刻度: 中 CVSS v3.1 スコア: 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 脆弱性の説明...

CVE-2023-44812

CVE-2023-44812 mooSocial v3.1.8 のユーザーログイン機能の adminredirecturl パラメータに存在する、反射型クロスサイトスクリプティング（XSS）の脆弱性です。攻撃者は巧妙に細工された URL を介して、管理者のセッション Cookie を窃取し、そのアカウントになりすますことが可能です。 脆弱性のあるパラメータ: adminredirecturl エクスプロイト - 概念実証（POC） 反射型クロスサイトスクリプティング（XSS） Payload : "alert1 FINAL Payload URL encoded :...

CVE-2025-60374

CVE-2025-60374 CVE-2025-60374: Perfex CRMチャットボットにおける保存型クロスサイトスクリプティング（XSS） ⚠️ セキュリティアドバイザリ Perfex CRMのチャットボット機能における重大な保存型クロスサイトスクリプティング（Stored XSS）の脆弱性 📋 概要 Perfex CRM 3.3.1...

CVE-2026-101891

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-101891

An improper access control vulnerability exists in an internal API service on WatchGuard Access Points . This flaw allows an unauthenticated attacker with network access to the access point to obtain a valid API session . No specific exploit details or remediation steps are provided in the docume...

GHSA-PGWP-VC7Q-CVJ3 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Summary A stored cross-site scripting XSS vulnerability in phpMyFAQ allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeove...

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Summary A stored cross-site scripting XSS vulnerability in phpMyFAQ allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeove...

Cross-site Scripting (XSS)

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Cross-site Scripting XSS via the htmlentitydecode process. An attacker can execute arbitrary JavaScript in an administrator's browser by submitting...

Cross-site Scripting (XSS)

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Cross-site Scripting XSS via the htmlentitydecode process. An attacker can execute arbitrary JavaScript in an administrator's browser by submitting...

CVE-2026-56736

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

EUVD-2026-86010

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736

The open-source FAQ web application phpMyFAQ is vulnerable to a stored cross-site scripting (XSS) flaw in versions prior to 4.2.0-alpha . The root cause is an HTML entity bypass where the html_entity_decode() function converts entities into executable HTML after strip_tags() has already processed...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

PT-2026-97827

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.2.0-alpha Description A stored cross-site scripting XSS issue exists that allows unauthenticated users or low-privileged registered users to inject arbitrary JavaScript. The attack occurs when an administrator...

CVE-2026-56736: Improper Neutralization of Input During Web Page Generation

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...