CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

UI_CVE-2017-9248

UICVE-2017-9248 Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler...

CVE-2019-1388

CVE-2019-1388 CVE-2019-1388 Abuse UAC Windows Certificate Dialog Description: This CVE exploit tend to abuse the UAC windows Certificate Dialog to execute the certificate issuer link as an NT Authority User and open a browser that is under NT Authority User. Then we can use that to prompt a shell...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

drupal-move-block-markup

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-move-block-markup Write-up: https://abraxaslabs.tech/research/drupal-move-block-markup drupal-move-block-markup Class: Stored XSS Reach: Remote Drupal core 11.4.8 61044508 - Drupal SA-CORE-2026-012 switched the...

CVE-2021-21123-PoC-Google-Chrome

📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

IconJector

IconJector This is a Windows Explorer DLL injection technique that uses the change icon dialog on Windows. It can trick users into loading a malicious DLL into their explorer process: https://github.com/0xda568/IconJector/assets/61665703/06428402-764c-4279-b762-1d01082552c8 Additionally, it can b...

CVE-2023-46998

Cross Site Scripting in Bootbox.js v.3.2 thru 6.0 allows a remote attacker to to inject HTML code and execute arbitrary JavaScript. Summary Vendor: BootBox Product: bootbox.js Affected versions: 3.2 to 6.0 CodeName: Venga-Que-Si-Es-Pa-Eso Vulnerability Type: Improper Neutralization of Input Durin...

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i Reference links CVE-2020-28488 Snyk jQuery UI Report...

CVE-2026-126744

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since "SA-CORE-2026-001"...

DRUPAL-CONTRIB-2026-335

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since SA-CORE-2026-001, which can lead to a...

CVE-2025-59536

CVE-2025-59536 - the startup trust dialog implementation. Claude Vulnerability Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2025-10-03 Legal For authorized security testing only. Root Cause short version Claude Code is an agentic coding tool. Versions befor...

PT-2026-145659

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since SA-CORE-2026-001, which can lead to a...

CVE-2026-102530 JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL can execute JavaScript in the Welcome...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

EUVD-2026-118084

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

The JetBrains Toolbox App versions prior to 3.9 are susceptible to a security issue where an insufficient warning in the login dialog could allow a user to connect to a malicious server . This vulnerability is associated with CWE-357 (Insufficient UI Warning of Dangerous Operations). No specific ...