Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - 跨站脚本漏洞 Bolt CMS 3.6.2 - 跨站脚本漏洞 CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 概念验证 要利用此漏洞，Bolt CMS 3.6.2 允许通过文本输入点击预览按钮触发 XSS，如 Configured 和 New Entry 的 Title 字段所示。 root@kitploit: POST /preview/page HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: Mozilla/5.0 Windows NT 10.0;...

BestWebSoft's Twitter < 2.55 - Cross-Site Scripting

The twitter-plugin plugin before 2.55 for WordPress has XSS. id: CVE-2017-18505 info: name: BestWebSoft's Twitter 2.55 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The twitter-plugin plugin before 2.55 for WordPress has XSS. impact: | Authenticated attackers can...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Big Blue Button における Libreoffice ファイル流出脆弱性の概念実証 これらの ODT ファイルは、サーバーサイドの Libreoffice レンダリング（例：BigBlueButton）で発生する可能性のあるファイル流出脆弱性を悪用する方法を示しています。 背景: https://blog.hboeck.de/archives/902-File-Exfiltration-via-Libreoffice-in-BigBlueButton-and-JODConverter.html...

CVE-2024-25293

PoC de Ejecución de Código Local en MJML Una Prueba de Concepto para la vulnerabilidad CVE-2024-25293. Se descubrió que mjml-app v3.0.4 y 3.1.0-beta contienen una vulnerabilidad de ejecución remota de código RCE. En este repositorio hay una aplicación vulnerable de ejemplo y un exploit de prueba ...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

EUVD-2026-80100

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level...

CVE-2026-11996

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level...

CVE-2026-11996 Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level...

CVE-2022-46638

CVE-2022-46638 涉及 AppLock（版本 5.6.2）的漏洞，这是一款流行的安卓应用，在全球超过150个国家拥有超过1亿用户。 PoC 只需多次点击返回键即可解锁由 AppLock 保护的应用。 1. 打开被 AppLock 锁定的应用。 2. 不要输入任何 PIN 码/密码。 3. 点击/按下返回键，观看广告然后关闭广告。 4. 重复步骤 1-3 多次。 5. 砰！☺ 被 AppLock 保护的应用就打开了。 证据 https://youtube.com/shorts/9-8ImPRvhUU?feature=share...

WordPress Advanced Popups plugin <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field vulnerability

Authenticated Author+ Stored Cross-Site Scripting via 'Notification Button Link' Field vulnerability discovered by Nguyen Cong Quang in WordPress Plugin Advanced Popups versions = 1.2.3...

TaskManager-Button-Disabler

TaskManager-Button-Disabler タスクマネージャーのボタンを無効化／名称変更するシンプルな方法。 インストール root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build 機能 killプロセスボタンの名称変更 killプロセスボタンの無効化 TaskMgr、ProcessHackerなどで動作します 動作例...

CVE-2025-69581

CVE-2025-69581 Chamillo LMS 1.11.2 において問題が発見されました。Social Network /personaldata エンドポイントは、適切なキャッシュ制御が欠如しているため、ログアウト後も機密性の高いユーザー情報をそのまま公開します。ブラウザの「戻る」ボタンを使用すると、すべての個人データが復元され、同じデバイス上の権限のないユーザーが機密情報を閲覧できるようになります。これにより、プロファイリング、なりすまし、標的型攻撃、および重大なプライバシーリスクが生じます。発見者：Rivek Raj Tamang RivuDon、インド・シッキム州。...

CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

CVE-2026-86440 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

CVE-2026-86440 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

EUVD-2026-72372

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

CVE-2026-86440

MISP 's dashboard Button widget is affected by a stored XSS caused by insufficient URL validation. The prior renderer treated a URL as safe if it appeared relative or matched the configured MISP hostname, but failed to reject dangerous schemes such as javascript: or backslash-based authority form...

PT-2026-86770

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

EUVD-2026-71843

The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consentmessage' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-76982

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...