EUVD-2026-93794

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106197

A Use after free vulnerability exists in the Google Chrome browser in versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by navigating the user to a crafted HTML page . While the severity is rated as Critical , no specific exploit li...

firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2020-6418

CVE-2020-6418 El CVE-2020-6418 trata sobre la confusión de tipos en V8 de Google Chrome. Las versiones afectadas fueron anteriores a 80.0.3987.122. La vulnerabilidad se logra mediante un atacante remoto que accede al shell de un dispositivo objetivo a través de una página HTML manipulada...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

CVE-2021-24563

CVE-2021-24563 前端上传器 alert/XSS/ -----------------------------124662954015823207281179831654 Content-Disposition: form-data; name="action" uploadugc -----------------------------124662954015823207281179831654 Content-Disposition: form-data; name="formlayout" image...

CVE-2025-22131-PoC

CVE-2025-22131-PoC PoC para CVE-2025-22131 PhpSpreadsheet es una biblioteca escrita en PHP puro y ofrece un conjunto de clases que te permiten leer y escribir varios formatos de archivos de hoja de cálculo como Excel y LibreOffice Calc. phpspreadsheet versión =2.2.0, =2.0.0, =3.0.0, sheetIndex ==...

CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...

morty

Morty 作为服务的Web内容净化代理 Morty 重写网页以排除恶意 HTML 标签和属性。它还会替换外部资源引用以防止第三方信息泄露。 Morty 的主要目标是作为 searx 的结果代理提供，但它也可以作为独立的净化服务使用。 特性： HTML 净化 将 HTML/CSS 外部引用重写为本地引用 阻止 JavaScript 不转发 Cookie 不发送 Referer 无缓存/ETag 支持 GET/POST 表单和 IFrame 可选的 HMAC URL 验证密钥以防止服务滥用 安装和设置 要求：Go 版本 1.10 或更高。 $ go get...

CVE-2020-16947

CVE-2020-16947 Ejecución remota de comandos en Outlook 2019 Este error ocurre al analizar contenido HTML. Si un atacante ejecuta con éxito este exploit, puede provocar la ejecución remota de comandos. Al copiar cadenas fuera del rango ASCII entre contenido HTML, la cadena correspondiente se...

device-pharmer

device-pharmer Abre simultáneamente resultados de búsqueda de Shodan, una IP específica, rango de IP, dominio o lista de IPs desde un archivo de texto e imprime el estado y el título de la página si corresponde. Añade las opciones -u y -p para intentar iniciar sesión en la página primero buscando...

CVE-2025-0994

CVE-2025-0994 此检测方法的工作原理？ 该Nuclei模板提取HTML body中存储的版本号，根据版本号我们可以判断该实例是否存在CVE-2025-0994漏洞。 补丁版本：15.8.9 如何运行此脚本？ 1. 从此处下载Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考链接 https://thehackernews.com/2025/02/cisa-warns-of-active-exploitation-in.html...

evildork

evildork👁️ 仅针对一个特定域或所有可用子域进行Dork搜索 针对一般目标（可能是个人）的Dork搜索 生成包含所有dork链接的HTML结果页面 请注意，Google在多次尝试后会添加验证码来检查你是否是机器人。 安装 📥 git clone https://github.com/Fricciolosa-Red-Team/evildork.git cd evildork python3 evildork.py 使用 🚀 usage: evildork.py -h -d DOMAIN -s -t TARGET -v Evildork targeting your fiancee...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerabilidad descubierta por mí CVE-2019-15053 Aviso: advisory.txt Información Básica Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...

pastokrapacefleciks

pastokrapacefleciks, el analizador WireShark - PRO Uso: Coloca tu archivo .pcapng en el directorio de pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Revisa tu informe HTML...

Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities

Summary IBM Verify Antenna has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CWE:CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' CVSS...