EUVD-2026-86383

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing...

CVE-2026-48540 Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing...

CVE-2026-96747

A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747

The MongoDB Python Driver client-side field level encryption support contains a vulnerability where a key management endpoint ending in .sock is incorrectly treated as a local Unix domain socket path instead of a remote host. An attacker with write access to encryption key metadata in the databas...

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2025-56800

CVE-2025-56800 Local Authentication Bypass Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-290: Authentication Bypass by Spoofing CVSS : 5.1 MEDIUM Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N...

JS-Secret-Hunter

JS Secret Hunter V2 🕵️‍♂️ JS Secret Hunter は、クライアントサイドJavaScriptにハードコードされた秘密情報の検出を自動化するために、セキュリティ研究者向けに設計された高度なPythonツールです。 単純なスキャナとは異なり、V2 には動的クローラが搭載されており、対象WebサイトのHTMLを解析して読み込まれたすべてのJavaScriptファイルを自動的に抽出するため、包括的なカバレッジを確保します。 機能 🕷️ 動的クローリング: HTMLを解析して、すべてのタグを自動的に検出します。 🔍 正規表現ベースの検出:...

cve-2024-26229

cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i...

OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex is an advanced, high-impact cybersecurity monorepo consolidating six powerhouse client-side security and sovereign intelligence workbanks. Operating entirely within browser-local memory environments with absolute data lockdown, this ecosystem delivers cross-vertical...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python D...

UBUNTU-CVE-2026-96747

The client-side field level encryption support in the MongoDB Python D...

CVE-2021-28378

CVE-2021-28378 Details about this CVE here. This CVE targets a missing string escaping on the client-side from content fetched from the server. It enables an attacker to inject arbitrary code easily, by creating a comment on an issue or a pull request. This was introduced in commit...

webvm

WebVM Este repositorio aloja el código fuente de https://webvm.io, una máquina virtual Linux que se ejecuta en tu navegador. Prueba el nuevo entorno gráfico Alpine / Xorg / i3: https://webvm.io/alpine.html WebVM es un entorno virtual sin servidor que se ejecuta completamente del lado del cliente ...

PublicSafe

PublicSafe Tu Navegador, Tu Espacio Seguro PublicSafe es una extensión de navegador gratuita y de código abierto centrada en la privacidad, el cifrado y el control del usuario. Proporciona herramientas de cifrado del lado del cliente diseñadas para ayudar a los usuarios a proteger información...

CVE-2024-48910-POC

CVE-2024-48910 Prueba de Concepto Esta es una prueba de concepto para CVE-2024-48910. Esta es una vulnerabilidad que estaba presente en DOMPurify, un sanitizador XSS para HTML, SVG y MathML. Esta versión de DOMPurify es vulnerable a la contaminación de prototipos, donde un atacante puede inyectar...

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...