BadOutlook

Bad Outlook 特定のトリガー件名に基づいてシステム上でシェルコードを実行するために、Outlookアプリケーションインターフェース（COMインターフェース）を利用するシンプルなPoCです。 Microsoft.Office.Interop.Outlook名前空間を利用することで、開発者はOutlookアプリケーション全体を表現できます（少なくともMicrosoftによると）。つまり、新しいアプリケーションはメールの読み取り（アーカイブ、ゴミ箱なども含む）から送信まで、あらゆることができるはずです。...

Malicious code in wallet-backup-tool (RubyGems)

RubyGems runs this gem's native extension script ext/wallet-backup-tool/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2023-42793

关于 CVE-2023-42793 你需要先通过使用不同的漏洞利用来获取令牌。然而，以下漏洞利用将允许你获取对 Linux 服务器的 RCE，因为它将有效载荷编码在 URL 中并将其发送到服务器。 使用方法 python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...

poc-cve-xss-encoded-wp-inventory-manager-plugin

更新 - 5/10/2023 CVE-2023-2123 ID が予約され、PoC が WPScan ウェブサイトで公開されました: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 詳細 タイトル: WordPress CMS 用 WP Inventory Manager プラグインにおける認証なしの反映型クロスサイトスクリプティング 日付: 2023-04-15 作者: Danilo Albuquerque ベンダーホームページ: https://wordpress.org ソフトウェアリンク:...

CVE-2026-104478 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete

Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...

PT-2026-104149

Name of the Vulnerable Software and Affected Versions Download Manager versions prior to 3.3.71 Description The Download Manager plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated users with subscriber-lev...

CVE-2026-100370

The DOMSanitizer library for PHP 7.3+ is vulnerable to an input-validation defect in its isDangerousUrl() method prior to version 1.0.15 . While the sanitizer correctly rejects the "javascript:" scheme, it only rejects the "data:" scheme if the literal substring "onload" is present. This allows a...

CVE-2023-42793

CVE-2023-42793について まず別のエクスプロイトを使用してトークンを取得する必要があります。ただし、以下のエクスプロイトはペイロードをURLにエンコードしてサーバーに送信するため、Linuxサーバー上でRCEを取得できます。 使用方法 root@kitploit: python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...

EUVD-2026-74603

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

WordPress SureForms plugin <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability

Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability discovered by daroo in WordPress Plugin SureForms versions = 2.12.2...

CVE-2026-18406

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a Text Field Entity-Encoded Payload in all versions up to and including 2.12.2 . The root cause is insufficient input sanitization and output escaping ...

EUVD-2026-71884

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406: Improper Neutralization of Input During Web Page Generation

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

PT-2026-86322

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

EUVD-2026-62710

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A...

MAL-2026-14199 Malicious code in txs-runner-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9d5d94b7f75bbe8bca33eb382bfb986e68b7f0307cad7e9626da103192f254 The package advertises itself as generating random transaction data, but its main API method getTransactions invokes loadtransactiondata, which reads...