CVE-2026-104413: Improper Neutralization of Input During Web Page Generation

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

PT-2026-104280

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.7 Description A server-side request forgery SSRF issue exists in the Bazar valeur action. Page editors can force the server to fetch arbitrary URLs by manipulating the url parameter. By embedding this action with ...

CVE-2026-1661: Improper Neutralization of Input During Web Page Generation

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

PT-2026-104395

Name of the Vulnerable Software and Affected Versions prosemirror-view versions prior to 1.42.3 Description The view component, which manages the editable browser interface for documents, contains a flaw in its paste handling. It accepts attacker-provided HTML where the clipboard slice context...

RHCOS 4 : OpenShift Container Platform 4.18.56 (RHSA-2026:70614)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70614 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 -...

attackmapper

AttackMapper 攻击路径可视化与威胁情报平台 功能特性 • 安装 • 使用 • 威胁情报 • 贡献 概述 AttackMapper 是一款用于红队行动的 CLI 工具，可生成攻击路径、将技术映射到 MITRE ATT&CK 框架，并集成实时威胁情报。生成带有攻击流可视化的交互式 HTML 报告。 功能特性 功能特性| 描述 ---|--- 攻击路径映射| 可视化从侦察到影响的完整杀伤链 MITRE ATT &CK 集成| 技术映射到官方 ATT&CK 框架 实时威胁情报| 实时 CVE、威胁行为者和热门 TTP 多基础设施支持| AD、AWS、Azure、GCP 和网络攻击路径...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

OutlookLeakTest

¡El Proyecto de Prueba de Fugas HTML de Outlook! Publicación del blog: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ ¿Qué hay en "./Schemes-List.xlsx"? Lista de esquemas de URI que podrían funcionar en Windows. Estos...

CVE-2025-52204

CVE-2025-52204 – Znuny customer.pl 端点中的反射型XSS/HTML注入 摘要 Znuny 存在反射型跨站脚本（XSS）和 HTML 注入漏洞，攻击者可通过系统配置 CustomerPanelSessionName 定义的参数在 customer.pl 端点注入任意 JavaScript 或 HTML。 分类 CVE: CVE-2025-52204 CWE: CWE-79 – 网页生成过程中输入的不当中和（'跨站脚本'） CVSS v3.1（研究人员评估）： 6.1 中等 CVSS Vector:...

CVE-2025-25296

CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...

CVE-2026-56662

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that...

CVE-2025-70849-Podinfo

CVE-2025-70849: XSS Almacenado en Podinfo Resumen Se identificó una vulnerabilidad de seguridad CWE-79 en Podinfo , una aplicación web para demostrar microservicios en Kubernetes. La funcionalidad /store permite a usuarios no autenticados cargar contenido arbitrario en HTML/JS, lo que provoca XSS...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Symantec IM Manager控制台HTML注入漏洞 信息 讨论 漏洞利用 解决方案 参考 Bugtraq ID: | 38241 ---|--- 类别: | 输入验证错误 CVE: | CVE-2009-3036 远程: | 是 本地: | 否 发布时间: | 2010年2月18日 12:00AM 更新时间: | 2010年2月18日 12:00AM 致谢: | Rafael B. Brinhosa 受影响版本: | Symantec IM Manager 8.4 Symantec IM...

CVE-2026-54049 Sakai Conversations has a Stored XSS Issue

Sakai is a Collaboration and Learning Environment CLE. From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in...

CVE-2026-71542

GetSimple CMS CE , versions 3.3.22 and prior , is vulnerable to a stored Cross-Site Scripting (XSS) flaw within the "Theme to Components" functionality at the admin/components.php path. The vulnerability exists because the title parameter is rendered inside a double-quoted HTML attribute without ...

CVE-2026-56662 GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that...

EUVD-2026-91018

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that...