Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

개념 증명: CVE-2024-42008 및 CVE-2024-42010 이 개념 증명PoC은 Roundcube Webmail의 두 가지 취약점을 악용하여 CSS 삽입과 크로스 사이트 스크립팅XSS을 가능하게 하는 방법을 보여줍니다. 공격은 두 단계로 구성됩니다: 1. 악성 XML 첨부파일을 통한 XSS CVE-2024-42008 파일 업로드 확인이 불충분하기 때문에 JavaScript 코드가 포함된 XML 파일을 첨부파일로 보낼 수 있습니다. 예: root@kitploit: " alertorigin 이 문제는 알려진 이슈였으며...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC 익스플로잇 alt text ExploitDB Dompdf 버전 1.2.1은 데이터에 CSS를 주입하여 원격 코드 실행RCE에 취약합니다. 파일이 악성 글꼴을 .php 파일 확장자로 글꼴 캐시에 저장하도록 속일 수 있으며, 이후 웹에서 해당 파일에 접근하여 실행할 수 있습니다. 사용법 root@kitploit: git clone https://github.com/rvizx/CVE-2022-28368 cd CVE-2022-28368 python3 -m p...

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name

Summary Embedded font-family names word/fontTable.xml were interpolated unescaped into an injected @font-face and into the print window's document.write. A crafted name injects page-wide CSS on open, and breaks out of into executable HTML on Print. Impact Opening a crafted .docx applies...

CVE-2026-86738

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url references to exfiltrate CSRF toke...

CVE-2026-86738 Snipe-IT before 8.7.0 CSS Injection via Custom CSS

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url references to exfiltrate CSRF toke...

EUVD-2026-72874

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url references to exfiltrate CSRF toke...

CVE-2026-86738

Snipe-IT versions before 8.7.0 are affected by a CSS injection vulnerability in the Custom CSS field . The root cause is incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. A superuser can plant malicious CSS payloads using @import and url() references...

CVE-2026-86738 Snipe-IT before 8.7.0 CSS Injection via Custom CSS

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url references to exfiltrate CSRF toke...

CVE-2026-48849-Roundcube-Webmail-Stored-XSS

CVE-2026-48849 - Roundcube Webmail의 저장형 XSS, HTML 인젝션 및 CSS 인젝션 개요 이 저장소는 Roundcube Webmail에서 발견된 CVE-2026-48849 저장형 크로스 사이트 스크립팅XSS, HTML 인젝션 및 CSS 인젝션 취약점에 대한 개념 증명PoC을 포함합니다. 이 취약점은 이메일 제목 필드를 통해 주입된 공격자 제어의 HTML, CSS 및 JavaScript가 임시 저장/세션 복원 데이터 내에 저장되고, 사용자가 다시 로그인하여 세션을 복원할 때 자동으로 실행되도록 합니...

CVE-2026-19698

The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous...

CVE-2026-19698 GutenKit < 2.5.1 - Contributor+ Stored CSS Injection

The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous...

EUVD-2026-70036

The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous...

CVE-2026-19698

CVE-2026-19698 affects the GutenKit WordPress plugin in versions before 2.5.1 . The root cause is the absence of validation or escaping on style settings saved against a post before they are used to build the CSS output on the front end. This allows users with the Contributor role or above to inj...

CVE-2026-19698 GutenKit < 2.5.1 - Contributor+ Stored CSS Injection

The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous...

EUVD-2026-43003

Snipe-IT has CSS Injection via headercolor Setting...

Chromium: CVE-2026-79234 Injection in CSS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-47666 Penpot: Stored XSS via custom font family name injected into a @font-face style rule

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through custom font family names, which are interpolated into a @font-face CSS rule and injected into the page as HTML without sanitization. Becaus...

CVE-2026-79234

A flaw was found in Google Chrome. This injection vulnerability in CSS allows a remote attacker to potentially obtain sensitive information by enticing a user to visit a specially crafted HTML page...

PT-2026-82332

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.15.3 Description Stored cross-site scripting occurs when custom font family names are interpolated into a @font-face CSS rule and injected into the page as HTML without sanitization. The backend accepts an arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-79234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium...