CVE-2020-28502

CVE-2020-28502 node-XMLHttpRequest RCE NVD 描述 这影响包 xmlhttprequest 1.7.0 之前的所有版本；以及包 xmlhttprequest-ssl 的所有版本。当请求同步发送时（即 xhr.open 中的 async=False），恶意用户输入流入 xhr.send 可能导致任意代码被注入并执行。 演示 设置 1. 从 Dockerfile 构建镜像 $ docker build -t cve-2020-28502 . 2. 在新容器中运行 node app.js $ docker run --rm -p 3000:3000...

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Vulnerabilidad XSS en la implementación de document var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload,...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite 扩展 该扩展为BurpSuite添加了一个上下文菜单，允许您将多个请求复制为JavaScript的XmlHttpRequest，从而简化了利用XSS时的PoC开发。 安装 从发行版下载最新的JAR或手动构建 通过标签页将JAR添加到BurpSuite：'扩展器' - '扩展' - '添加' 用法 从任何标签页中选择一个请求，或从'代理' - 'HTTP历史记录'标签页中选择多个请求 调用上下文菜单并选择'复制为XMLHttpRequest'...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

cve-2016-1764

CVE-2016-1764 漏洞利用 PoC 代码 无需破解加密即可恢复明文 iMessage 数据 作者 Shubham Shah 来自 Bishop Fox Joe DeMesy 来自 Bishop Fox Matthew Bryant CVE-2016-1764 供应商： Apple 发布日期： 2016年4月8日 补丁日期： 2016年3月21日 受影响系统： OS X Mountain Yosemite、El Capitan 上的 Messages 尽管近期围绕 Apple...

toxssin

toxssin Propósito toxssin es una herramienta de pruebas de penetración de código abierto que automatiza el proceso de explotación de vulnerabilidades de Cross-Site Scripting XSS. Consiste en un servidor https que actúa como intérprete del tráfico generado por el payload malicioso de JavaScript qu...

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

CVE-2017-5638

CVE-2017-5638 CVE: 2017-5638 的不同格式 大多数工具需要您输入URL，您可能想更改命令。 如果您能实现输入URL和命令的功能，请提交Pull Request！ PHP - 示例 http://localhost/2017-5638.php?url=TARGET&cmd=command XMLHttpRequest - CVE-2017-5638.js -- 需要目标服务器上设置Access-Control-Allow-Origin并允许主机页面。 所有其他工具需要进一步测试。...

Astra Linux – Vulnerability in Firefox and Thunderbird

Cross-Site Tracing occurs when a server echoes a request back using the Trace method, allowing an XSS attack to access authorization headers and cookies that are inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers imposed restrictions on fetch and...

DRUPAL-CONTRIB-2026-127

This module enables you to restrict access to JSON:API routes based on specific user roles. The module doesn't sufficiently enforce access controls under scenarios where a request mimics an XMLHttpRequest...

PT-2026-68209

Name of the Vulnerable Software and Affected Versions Electron versions prior to 39.8.10 Electron versions prior to 40.9.3 Electron versions prior to 41.4.0 Electron versions prior to 42.0.0 Description A custom scheme registered with supportFetchAPI: true but without corsEnabled: true does not...

CVE-2026-70604: Permissive Cross-domain Policy with Untrusted Domains

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered with supportFetchAPI: true but without corsEnabled: true was not subject to CORS enforcement. A page loaded from a remot...

CLSA-2026-1785204344 TuxCare security update for xmlhttprequest-ssl (2 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 2 CVEs. Fixed in 1.5.1-tuxcare.1...

CLSA-2026-1777336760 TuxCare security update for xmlhttprequest (1 CVE)

TuxCare rebuilt xmlhttprequest to address 1 CVE. Fixed in 1.4.2-tuxcare.1...

CLSA-2026-1773188115 TuxCare security update for xmlhttprequest-ssl (2 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 2 CVEs. Fixed in 1.5.3-tuxcare.1...

CLSA-2026-1772064638 TuxCare security update for xmlhttprequest-ssl (2 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 2 CVEs. Fixed in 1.5.5-tuxcare.1...

CVE-2026-41452 Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

CVE-2026-52843: Origin Validation Error

Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch and XMLHttpRequest unconditionally attached session cookies to every HTTP request, ignoring credentials: omit, credentials: same-origin, credentials: include, and XMLHttpRequest.withCredentials,...

urllib3 does not control redirects in browsers and Node.js

urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means you can use Python libraries to make HTTP requests from your browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects.However, the retries a...

PYSEC-2026-1997 urllib3 does not control redirects in browsers and Node.js

urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means you can use Python libraries to make HTTP requests from your browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects. However, the retries...