2230051 matches found
CVE-2026-88058 Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
EUVD-2026-75681
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
CVE-2026-88058 Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
CVE-2026-88058 Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
CVE-2026-88058
Angular SSR in @angular/platform-server (prior to 20.3.30, 21.2.22, and 22.1.4 ) serializes ProcessingInstruction DOM nodes inside fallback raw-content elements (noscript, iframe, noembed, noframes) without escaping character was escaped but
serverless [email protected]
Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...
RAT-via-Telegram
RAT-via-Telegram 基于Telegram的Windows远程管理工具（现已支持Python 3.7！）| 原作者 Ritiek 为什么又一个？ 当前市场上的远程管理工具面临两大问题： 缺乏加密。 需要端口转发才能从千里之外进行控制。 本RAT通过使用Telegram bot API克服了这两个问题。 完全加密。交换的数据无法通过MITM工具被窃听。 Telegram消息应用提供了一种简单方式与目标通信，无需事先在目标上配置端口转发。 功能特点： 键盘记录器，包含窗口标题记录 获取目标PC的Windows版本、处理器等信息 获取目标PC的IP地址信息及地图上的近似位置...
gcat
Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...
maltrieve
root@kitploit: | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve 最初是 mwcrawler 的一个分支。它直接从许多网站上列出的来源获取恶意软件。目前我们爬取以下来源： Malc0de Malware Domain List Malware URLs VX Vault URLquery CleanMX ZeusTracker 其他改进包括： 代理支持 多线程以提高性能 记录来源 URL 支持多种用户代理 更好的错误处理 支持 VxCage、Viper 和 Cuckoo...
martian
Martian Proxy Martian Proxy 是一个可编程的 HTTP 代理，专为测试而设计。 如果你想要： 验证所有（或部分）请求是否安全 在网络层模拟外部服务 注入标头、修改 Cookie 或对 HTTP 请求和响应执行其他变更 验证回传是否在你预期的时间发生 解包加密流量（需在浏览器中安装 CA 证书） 那么 Martian 是一个很好的工具。 借助 Go 的交叉编译特性，Martian 可以部署在任何 Go 支持的目标平台上。 最新版本 v3.0.0 系统要求 Go 1.11 Go 模块支持 Martian Proxy 从 v3.0.0 开始支持 Go 模块。如果你使用...
NINJA-PingU
NINJA PingU NINJA-PingU Is Not Just a Ping Utility is a free open-source high performance network scanner tool for large scale analyses. It has been designed with performance as its primary goal and developed as a framework to allow easy plugin creation. NINJA PingU comes out of the box with a se...
CGA-XPJR-RX3M-FHP7
Bulletin has no description...
CVE-2026-88056
Angular's @angular/platform-server is vulnerable to SSRF and cross-origin credential disclosure prior to versions 20.3.30, 21.2.22, and 22.1.4 . The root cause is that the resolveUrl and parseUrl utilities invoked String.prototype.trim(), which strips leading Unicode whitespace (e.g. U+00A0, U+FE...
CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...
EUVD-2026-75675
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...
CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...
CVE-2026-88056
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...
CVE-2020-29669
=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...
CVE-2025-9485
漏洞利用：通过未签名 JWT 绕过身份验证（alg: none） 1 伪造一个声明管理员邮箱的未签名 JWT root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify alg: "none", typ: "JWT" ; const now = Math.floorDate.now/1000; const...
