CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103631

A buffer overflow vulnerability in the WebRTC component of Google Chrome (prior to version 154.0.8037.97 ) allows a remote attacker to execute arbitrary code inside the browser's sandbox. The attack is initiated by enticing a user to visit a specially crafted HTML page . While the execution is re...

CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

CVE-2026-104906

The MISP platform contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer (versions

unwaf

Unwaf Unwaf 是一款 Go 工具，旨在通过被动技术 帮助识别 WAF 绕过。它通过结合多种发现方法，并通过 HTML 相似度比较、SSL 证书指纹和 HTTP 头分析来验证候选 IP，从而自动化发现 WAF/CDN 背后真实源站 IP 的过程。 Unwaf 将我在这篇 LinkedIn 帖子中解释的步骤自动化了：Passive WAF bypassing 当前版本：3.0.0 — 版本历史请参阅 CHANGELOG.md。 目录 工作原理 发现方法 验证方法 安装 用法 选项 示例 配置 作者 许可证 工作原理 1. 动态 WAF CIDR — 获取实时 Cloudflare ...

SmuggleMyPayload

SmuggleMyPayload SmuggleMyPayload 是一个 HTML 走私工具包，用于生成通过 JavaScript 嵌入并重建文件的 HTML 页面。它提供了多种 HTML 走私方法、载荷编码选项、JavaScript 变体以及多个内置 HTML 模板。 功能特性 多种 HTML 走私方法 多个 HTML 模板 Base64 载荷编码 载荷分块 基于 JavaScript 的文件重建 JavaScript 字符串混淆 随机化 JavaScript 变量名 自动下载功能 Iframe Blob 投递 自定义 HTML 模板 自定义页面标题和品牌标识 交互式 CLI 命令行...

CVE-2026-104413

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2025-66470

NiceGUI XSS Scanner - CVE-2025-66470 📸 截图 一款用于检测CVE-2025-66470 的快速简易扫描器 —— NiceGUI 中 ui.interactiveimage 组件的 XSS 漏洞。 🔍 漏洞详情 字段| 值 ---|--- CVE| CVE-2025-66470 GHSA| GHSA-2m4f-cg75-76w2 组件| ui.interactiveimage 受影响版本| NiceGUI ≤ 3.3.1 修复版本| NiceGUI 3.4.0+ 类型| 存储型/反射型 XSS 根本原因 ui.interactiveimage 组件使用...

EUVD-2026-91481

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page editors to make the server fetch arbitrary URLs. Attackers can supply loopback or internal URLs in the url parameter to probe internal services and inject unescaped remote HTML th...

CVE-2026-104470

Versions of YesWiki before 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Bazar valeur action . This flaw allows authenticated page editors to force the server to fetch arbitrary URLs by providing them via the url parameter . By embedding this action with a ...

EUVD-2026-91424

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2020-11022

是这样的 是这样的朋友们，CVE-2020-11022 是 jQuery 低于 3.5.0 版本（及更早版本）中的一个漏洞，该漏洞本身是通过利用 DOM 操作（例如 .html、.append 等）触发 XSS，从而执行恶意的 XSS 代码。 1. 验证 jQuery 版本 ：确保目标使用的是存在漏洞的 jQuery 版本。该漏洞影响低于 3.5.0 的 jQuery 版本（3.5.0 及以上版本已修复）。 2. 识别目标元素（转储 ID） ：收集（转储）页面中所有 HTML 元素的 id 属性。这是为了查找可能被应用程序用作处理输入的接收器（sink）的元素，通过这些元素可以使用 DO...

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 快速尝试 import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text 或 POST /wp-login.php HTTP/1.1 Host: 127.0.0.1:9000 Content-Type:...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...