CVE-2024-38475

CVE-2024-38475 POC Credit : All credit to this guy: https://blog.orange.tw/ and https://x.com/orange8361 all i did was make a POC script from his research. Introduction : Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesyste...

Astra Linux – Vulnerability in Golang 1.15, Golang 1.19

Actions that insert URLs into the content attribute of HTML meta tags do not escape those URLs. This can lead to XSS attacks if the meta tag also contains an http-equiv attribute with the value “refresh”. A new GODEBUG setting, htmlmetacontenturlescape, has been added, which can be used to disabl...

Astra Linux – Vulnerability in python-ldap

Python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the ldap.dn.escapednchars function incorrectly escaped \x00 by emitting a slash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this functi...

CVE-2025-0924-different

CVE-2025-0924分析中出现的其他漏洞 01. 存储型XSS与WordPress、WP Activity Log 概述 1 存储型XSS与WordPress、WP Activity Log 概述 存储型XSS是一种恶意脚本存储在服务器上，之后其他用户打开相应页面时自动执行的漏洞，属于CWE-79（网页生成过程中输入未正确中和（'跨站脚本'））指定的攻击类型。 WordPress是全球最受欢迎的开源内容管理系统（CMS），使用户能够轻松构建和管理网站及博客。即使用户没有代码知识，也可以通过各种插件和主题扩展和定制网站。 WP Activity...

CSRF-via-stored-XSS-for-PrivEsc

Chamilo LMS addLabelgetlang'Thread', $threadEntity-getTitle; 2. /public/main/forum/viewforum.php - Línea 369 .$thread-getTitle.''; 3. ¡Hay más! Causa Raíz: Los títulos de los hilos del foro se almacenan sin la sanitización adecuada Los títulos de los hilos se muestran sin escape HTML en múltiples...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...

CVE-2024-10793

CVE-2024-10793 CVE-2024-10793 poc exploit El script CVE-2024-10793.yaml es necesario para buscar un plugin. El script CVE-2024-10793.sh es el exploit en sí. Para post-explotación, puedes usar beef-xss. Google dork: inurl:wp-content/plugins/wp-security-audit-log El plugin WP Activity Log para...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Apache Tomcat XSS Vulnerability in Generated JSPs🚨🚨 Overview CVE-2024-52318 is a crosssite scripting XSS vulnerability in Apache Tomcat, which arises from improperly released resources in generated JavaServer Pages JSPs. This issue, introduced by a prior...

CVE-2025-67511

CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...

rcno-reviews

Recencio Book Reviews A WordPress plugin for managing and displaying book reviews. Custom post type, 7 taxonomies, 13 shortcodes, 7 widgets, 6 templates, 5 extensions. All data stored in standard WordPress post meta — no custom tables. Background Recencio Book Reviews was created by Kemory Grubb...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...

magento2-template-filter-patch

Magento 2 Template Filter Patch for CVE-2022-24086, CVE-2022-24087 Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Inyección SQL no autenticada Descripción El plugin Subscribe to Category para WordPress es vulnerable a inyección SQL en versiones hasta la 2.7.4 inclusive debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de...

cve-2020-7247

cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Execution. The new Date: 2020-01-29. Exploit Author: 1F98D. Original Author: Qualys Security Advisory. Vendor Homepage: https://www.opensmtpd.org/. Software Link: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1. Version:...

CVE-2026-96650

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.3.11 . The root cause is insufficient input sanitization and output escaping of the 'platform_user_photo' Custom Field. An unauthenticated attacker can inject arbi...

EUVD-2026-91904

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platformuserphoto' Custom Field in all versions up to, and including, 3.3.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK Path Traversal Lab A small, reproducible Docker lab that contrasts the percent-encoded path traversal behavior in NLTK 3.9.4 with the corrected behavior in NLTK 3.10.0. The vulnerable version validates the resource name before URL decoding. The fixed payload...

CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-92243

The Ivory Search – WordPress Search Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 5.5.18 . The root cause is insufficient input sanitization and output escaping associated with the 's' parameter . This allows unauthenticated attacke...

EUVD-2026-91880

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...