CVE-2026-86772 Snipe-IT 8.6.3 Stored XSS via Department Names

Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink where department names are rendered unescaped in the fallback branch for users without departments.view permission. Users with departments.edit permission can inject...

EUVD-2026-74949

Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink where department names are rendered unescaped in the fallback branch for users without departments.view permission. Users with departments.edit permission can inject...

CVE-2026-86767

Snipe-IT versions before 8.7.0 fail to apply company scope filtering to the GET /hardware/requested endpoint when Full Multiple Company Support is enabled. Authenticated users holding the assets.view permission can retrieve pending asset requests from all companies without parameter manipulation,...

EUVD-2026-74919

Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by hand stripping commas and joining rows manually and, unlike the six sibling exports in the same controller, never...

CVE-2026-87813

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

EUVD-2026-74839

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

CVE-2026-87813 SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

CVE-2026-87813 SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

EUVD-2026-74282

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x 경로 탐색 인증 우회 모든 공로는 j0v와 그의 트윗 https://twitter.com/j0v0x0/status/1466845212626542607 에 있습니다. 면책 조항 이는 교육 목적으로만 제공됩니다. 저는 여러분의 행동에 대해 책임을 지지 않습니다. 사용에 따른 책임은 본인에게 있습니다. 선의에 따라, 이 취약점이 공개되거나 패치가 제공될 때까지 이 PoC를 공개하지 않았습니다. 목차 설명 - 취약점 설명 공격 벡터 - 수행할 수 있는 공격 목록 익스플로잇 스크립트 -...

CVE-2026-81904

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Введение Мы предоставляем DevOps и командам безопасности скрипт для идентификации облачных рабочих нагрузок, которые могут быть уязвимы к уязвимости Log4j log4shell в их AWS-аккаунте. В настоящее время мы поддерживаем уязвимости "CVE-2021-44228" и "CVE-2021-45046"...

CVE-2026-34910-unifi-poc

UniFi OS CVE 개념 증명 승인된 테스트를 위한 두 경로에 대한 개념 증명으로, 다음과 같이 식별됩니다: CVE-2026-34910: 인증 우회auth bypass로, 패킷 업데이트 핸들러를 통한 명령 주입 및 원격 코드 실행으로 이어질 수 있습니다. CVE-2026-34909: 경로 탐색path traversal으로, app-assets 별칭을 통해 임의 파일 읽기로 이어질 수 있습니다. 이 스크립트는 귀하가 소유하거나 명시적으로 테스트 권한을 부여받은 기기 및 네트워크에 대한 보안 검증을 위한 것입니다. 타인의...

assets-from-spf

assets-from-spf SPFSender Policy Framework DNS 레코드에서 넷블록netblocks 및 도메인 이름을 파싱하는 Python 스크립트 파싱된 각 자산에 대해 스크립트는 자율 시스템 번호ASN 세부 정보도 찾아 출력합니다. 현재 출력은 JSON 형식으로만 인쇄됩니다 데모 스크린샷 서드파티 패키지 의존성 1. ipwhois 2. click 설정 이 저장소를 클론하세요 root@kitploit: $ git clone...

EUVD-2026-71999

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...

CVE-2026-86197 Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...

CVE-2026-86197 Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...

EUVD-2026-69914

Craft CMS versions from 5.7.0 before 5.10.12 contain an information disclosure vulnerability in AssetsController::actionMoveInfo that fails to enforce volume permissions. Authenticated control panel users can submit POST requests to the assets/move-info endpoint with arbitrary folderIds to retrie...

CVE-2026-84800 Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-file

Craft CMS versions = 5.0.0-RC1 and 5.10.11 contain a missing authorization vulnerability in AssetsController::actionReplaceFile. When a request supplies sourceAssetId and targetFilename but omits assetId, the target asset is resolved by folder and filename after the permission checks execute, so...