beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

CVE-2018-5146

CVE-2018-5146 's exp and poc poc.ogg ：self-constructed poc file cve-test2.html ：exploit file crctest.exe：calculate the crc32 of the ogg file...

JShell

JShell JShell - Get a JavaScript shell with XSS. Usages Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33. As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim. As soon as you do that, you wil...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com ファイル 'doc/COPYING' のコピー許可については同ファイルを参照してください =============================================================================== BeEF とは？ BeEF は The Browser Exploitation Framework...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 与 CVE-2025-11450 修复脚本 概述 该脚本可自动检测并修复 ServiceNow UI Macros 中的 CVE-2025-11449 和 CVE-2025-11450 安全漏洞。如果用户控制的 sysparm 参数未得到正确清理，这些漏洞可能通过特制链接在用户浏览器中执行任意代码。 受影响的 UI Macros $pwdverifyemail $pwdverifypersonaldataui 脚本功能 该脚本执行两项关键安全修复： 1. 块外部：添加正确的编码 将易受攻击的模式替换为正确编码的版本： $sysparm ...

CVE-2019-0567-MS-Edge

CVE-2019-0567-MS-Edge POC Windows 10 マシン上で動作する MS Edge のブラウザ脆弱性の悪用と移行を学ぶための演習としての概念実証です。すべてのコードは Connor McGarr によって作成され、Windows 10 build 15063.483 で動作するように編集されています。 shell2js.py msfvenom の C ペイロードを JavaScript ペイロード形式に変換する私の個人スクリプトです。 概念実証動画 Connor McGarr ブログ:...

Browser-Pwning-

Browser-Pwning Chrome pwning & v8 pwning を始めるための、適切で構造化されたドキュメント ドキュメントの構成 このドキュメントの整理方法 1. モチベーション 2. 実際の学習資料 モチベーション ブラウザは、今日最も使われているテクノロジーの一つです。どの既製コンピュータでも、プラグアンドプレイするだけでブラウザがインストールされているのを確認できます。そのため、攻撃者と脅威モデルの視点から見ると、攻撃者が悪意あるページを通じてブラウザを侵害できることは非常に価値があります。上記の理由から、私は Google の JavaScript エンジン、...

browser-pwn

Browser-Pwn === 浏览器世界由四大主要参与者主导： Chromium/Chrome（Blink 引擎） Firefox（Gecko 引擎） Safari（WebKit 引擎） Edge（Blink 引擎，前身为 EdgeHTML 引擎） 以下内容分为两个部分： 帮助理解其架构与实现，以及如何从源码构建它们的信息 帮助找到让它们弹出计算器（calculator popping）的功能的信息 目录 1. 引擎 概述 Chromium Firefox Safari Edge 2. 漏洞利用 概述 Chromium Firefox Safari Edge 3. 工具 4...

CVE-2026-81092

mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamablehttp.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's...

CVE-2026-81099

Timescale's tiger-slack failed to enable the DNS-rebinding-protection option when starting its MCP HTTP transport in mcp/src/httpServer.ts, leaving the host allow-list disabled. This allowed a malicious web page to use DNS rebinding to steer requests to the locally bound Slack MCP server through ...

CVE-2026-81099 Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List

tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, and a page i...

CVE-2026-81100 Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List

tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, making t...

CVE-2026-76252 Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized JavaScript in that user's browser. This could allow for unauthorized access to all relevant data available to that user...

Hacking Safari with GPT 5.4

When Anthropic unveiled Mythos and Project Glasswing, the reaction was immediate and polarized. Some dismissed it as fear-driven marketing, while others treated it as a credible shift in the threat landscape. Like with many things, the truth is probably somewhere in the middle. I wanted to test...

Smoothwall Express Cross-Site Scripting Vulnerability (CNVD-2026-14349)

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the portfw.cgi script multiple parameters of the user-supplied data lack of effective filtering and escaping , an attacke...

Esri ArcGIS Server 跨站脚本漏洞

Esri ArcGIS Server is a web-oriented enterprise software platform available for providing geolocation services from Esri. A cross-site scripting vulnerability exists in Esri ArcGIS Server version 11.4 and earlier, which stems from a stored cross-site scripting issue that could lead to malicious...

CVE-2025-34399

MailEnable versions prior to 10.54 are affected by a reflected XSS in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The AddressesCc value is not properly sanitized for GET requests and is echoed inside a [removed] block in the JavaScript variable sAddrCc, enabling an attack...

Docker MCP Gateway 安全漏洞

Docker MCP Gateway is a gateway service from Docker Inc. in the United States. A security vulnerability exists in Docker MCP Gateway version 0.27.0 and earlier, which stems from vulnerability to DNS rebinding attacks when running in sse or streaming transport mode, and could lead to browser-based...

EUVD-2025-34748

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-10552

The CVE-2025-10552 entry describes a stored Cross‑site Scripting (XSS) vulnerability in 3DSwym on the 3DEXPERIENCE platform (R2025x). The vulnerability affects 3DSwym prior to Release R2025x and allows an attacker to execute arbitrary script in a user’s browser session. The PT-2025-41765 advisory...