Exploit for CVE-2026-64638

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE e...

web-app-security-lab

Vulnerable Web App — Attack & Defend Lab A deliberately-vulne...

Exploit for CVE-2023-39848

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

GHSA-H9W6-F932-GQ62 ses's global contour bindings leak into Compartment lexical scope

Impact Web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that have also elsewhere used const, let, and class bindings in the top-level scope of a tag will have inadvertently revealed these bindings in the lexical scope...