CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 このリポジトリには、CVE-2024-5836 および CVE-2024-6778 の概念実証（PoC）エクスプロイトが含まれています。これらはChromiumウェブブラウザにおける脆弱性であり、ブラウザ拡張機能からのサンドボックスエスケープを可能にするものです。これらを実行するには、126.0.6478.54 より古いバージョンのChromiumを使用している必要があります。 解説記事: https://ading.dev/blog/posts/chromesandboxescape.html バグ報告:...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 是 PDF.js 中的一个严重漏洞（CVSS 9.8），由于对 PDF 文件中的 FontMatrix 对象类型检查不足，允许执行任意 JavaScript 代码。 CVE-2024-4367 漏洞利用向导：用户指南 CVE 标识符| CVE-2024-4367 ---|--- 严重性| 严重（CVSS 评分：9.8） 漏洞类型| PDF.js 中因对 FontMatrix 对象类型检查不足而导致的任意 JavaScript 代码执行 利用方式| 恶意构造的 PDF 文件可在受害者浏览器中执行...

cve-2024-4367-poc

CVE-2024-4367 的 PDF.js POC PDF.js 的 CVE-2024-4367 漏洞的 POC——pdf-modify.py 脚本可用于修改你的 PDF 并注入载荷。 使用方法 1. 确保 CVE-2024-4367-POC-base-placeholder.pdf 位于工作目录中。 2. 取消注释/修改 pdf-modify.py 中的 payloadnew 变量。 3. 运行它：python pdf-modify.py，无需任何参数。 4. 你会在本地目录中看到一个新的 PDF，其文件名带有时间戳后缀。 相关参考...

CVE-2024-4367

CVE-2024-4367 POC 使い方 root@kitploit: python poc.py mal.pdf "alert'0xr2r'" 参照 CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC スキャナー templates...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2024-29831

CVE-2024-29831 relates to an improper input validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server, potentially enabling remote code execution. Affected: DolphinScheduler; remediation guidance consistentl...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367 POC Usage bash python poc.py malicious.p...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

Starbucks: Reflected XSS on https://www.starbucks.co.uk/shop/paymentmethod/ (bypass for 227486)

Hi guys, I am now able to prove my concerns from 227486 see my last comment. "s are still not correctly encoded when rendered into the page in the element on almost any https://starbucks.co.uk/ page. The WAF is bypassed by encoding "s as %2522 in the URL path. This won't work when the payload is...