CVE-2026-64638

CVE-2026-64638 // XSS2Shell CVE-2026-64638 （ XSS2Shell ）の技術分析と防御的緩和マトリクス。WordPress Core の認証画面におけるパース処理の重大な不整合を悪用し、認証前の反射型 Cross-Site Scripting（XSS）をブラウザのプリミティブと連鎖させ、リモートコード実行（RCE）にまで到達させるものです。 🛠️ エグゼクティブサマリー ベクターID: CVE-2026-64638 コードネーム: XSS2Shell 深刻度: 高（CVSS 4.0: 8.9） CWE分類:...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress 事前認証反映型XSS → リモートコード実行チェーン DOM Clobbering + アプリケーションパスワード窃取 + REST API プラグイン有効化 = 完全なRCE ⚡ 概要 CVE-2026-64638 は、WordPress の wp-login.php における重大な事前認証型反映XSS です。この脆弱性は、ログインエラーメッセージが送信されたユーザー名を適切なHTMLエンコードなしで 反映するために存在し、 によるDOM Clobberingを可能にして、ほとんどのフィルタを回避します。...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPressの事前認証XSS → RCEエクスプロイトチェーン。pwn.ai による研究に基づき、ionsec.io に公開されています。 ⚠️ 法的警告 : 教育目的 および許可されたテスト 専用です。所有するシステム、または明示的な書面による許可を得たシステムに対してのみ使用してください。 ラボ検証 手順| 手法| 状態 ---|---|--- 1| パーサー差分XSS sanitizeuser + ブラウザのパース差分| ✅ 検証済み 2| DOM clobbering , | ✅ 検証済み 3|...

CVE-2026-64638

CVE-2026-64638 ログイン画面の反射型XSSによるPHPコード実行 — WordPress Core ソフトウェア: WordPress Core ≤ 7.0.2（7.0.3より前の全バージョン） CVSS: 8.9（高） CWE: CWE-79 — ウェブページ生成時の入力の不適切な無害化 必要な認証: なし（事前認証） ユーザー操作: あり（管理者がリンクを1回クリックする必要あり） 影響: XSS → アカウント乗っ取り → リモートコード実行 1. この脆弱性とは WordPress...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-49458 DESCRIPTION: DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizenode, INPLACE: true accepted...

Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data.

Summary There are multiple vulnerabilities impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-61729 DESCRIPTION: Within HostnameError.Error, when constructing an error string, there is ...

Exploit for CVE-2026-64638

CVE-2026-64638 // XSS2Shell Análisis técnico y matriz de mi...

CVE-2026-74939

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

EUVD-2026-58245

wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...

Exploit for CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PH...

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

ImpactThe vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature.A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

PYSEC-2026-2536 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

PT-2026-59194

Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

CVE-2026-54267

A flaw was found in the Angular framework's client-side hydration feature for Server-Side Rendered SSR applications. This vulnerability, known as DOM Clobbering, allows a remote attacker to inject malicious data into the application's internal data cache. By exploiting a predictable identifier us...

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

ImpactThe vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature.A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

PYSEC-2026-1481 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

Linux Distros Unpatched Vulnerability : CVE-2026-54267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, an...

CVE-2026-54267

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered SSR environments, Angular supports Hydration via...

DEBIAN-CVE-2026-54267

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered SSR environments, Angular supports Hydration via...

CVE-2026-54267

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered SSR environments, Angular supports Hydration via...