CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 프로토타입 오염 및 JS 인젝션 체인 — 연구 PoC 개요 이 레포지토리는 2026년 Adobe Acrobat Reader의 실제 익스플로잇 체인 분석 중 개발된 연구 자료와 개념 증명 코드를 포함합니다. 해당 체인은 다음을 포함합니다: 프로토타입 오염 내부 JavaScript 인젝션 신뢰된 워크플로우 악용 패치 차이 분석 권한 있는 JavaScript 실행 이 연구는 악성 PDF 문서에 사용된 취약점 체인을 이해하고 Adobe가 여러 패치를 통해 도입한 수정 사...

CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 이 저장소는 Chromium 웹 브라우저의 취약점인 CVE-2024-5836 및 CVE-2024-6778에 대한 개념 증명 익스플로잇을 포함합니다. 이 취약점을 통해 브라우저 확장 프로그램에서 샌드박스 이스케이프가 가능했습니다. 이를 실행하려면 126.0.6478.54보다 오래된 Chromium 버전을 사용해야 합니다. 분석 글: https://ading.dev/blog/posts/chromesandboxescape.html 버그 리포트:...

cve-2024-4367-poc

CVE-2024-4367 的 PDF.js POC PDF.js 的 CVE-2024-4367 漏洞的 POC——pdf-modify.py 脚本可用于修改你的 PDF 并注入载荷。 使用方法 1. 确保 CVE-2024-4367-POC-base-placeholder.pdf 位于工作目录中。 2. 取消注释/修改 pdf-modify.py 中的 payloadnew 变量。 3. 运行它：python pdf-modify.py，无需任何参数。 4. 你会在本地目录中看到一个新的 PDF，其文件名带有时间戳后缀。 相关参考...

CVE-2024-4367

CVE-2024-4367 POC 사용법 python poc.py mal.pdf "alert'0x2r2'" 참고 자료 CVE-2024-4367: PDF.js에서 임의 JS 실행 PDF.js POC 스캐너 템플릿...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 は PDF.js における重大な脆弱性（CVSS 9.8）であり、PDF ファイル内の FontMatrix オブジェクトに対する型チェックの不備により、任意の JavaScript コード実行が可能になります。 CVE-2024-4367 エクスプロイトウィザード：ユーザーガイド CVE 識別子| CVE-2024-4367 ---|--- 深刻度| 重大（CVSS スコア：9.8） 脆弱性| FontMatrix オブジェクトに対する型チェックの不備による PDF.js での任意の JavaScript...

CVE-2026-103662

MISP contains a reflected cross-site scripting XSS vulnerability in the legacy taxonomy tag management confirmation forms add tag and disable tag. The affected forms echoed a user-supplied tag name value from the request unescaped into the rendered HTML output. An attacker who can induce a site...

Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes

Summary The SemanticMediaWiki extension inserts the unsanitized value of a data attribute into the DOM as HTML, allowing for stored XSS through wikitext. Details In ext.smw.js, the data-subtab attribute of all elements with the smw-subtab class is parsed as JSON and appended to the innerHTML of t...

EUVD-2026-82863

A stored Cross-Site Scripting XSS vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScript content into the fields containing their personal data. The content entered is stored and displayed without being...

CVE-2026-54645 CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, descriptionshort, and speccopy rich-text fields from $GLOBALS'RAW''POST' and removes only script elements before the values are stored and rendered through Smarty templates. An...

CVE-2026-54645 CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, descriptionshort, and speccopy rich-text fields from $GLOBALS'RAW''POST' and removes only script elements before the values are stored and rendered through Smarty templates. An...

CVE-2026-19619 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to...

CVE-2026-92234 QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-66917: Improper Neutralization of Input During Web Page Generation

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Duplicate Advisory: Grav: XSS Blueprint Validation Bypass via Twig String Concatenation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2c4f-86xc-cr74. This link is maintained to preserve external references. Original Description Grav v2.0.0 contains a cross-site scripting vulnerability fixed in 2.0.1. The XSS blueprint validator...

CVE-2026-44670

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View AV / database names without any HTML escape, then a render template uses raw strings.ReplaceAlltpl, "$avName", nodeAvName to embed the name in HTML before pushing to all clients via...

CVE-2025-62296: Improper Neutralization of Input During Web Page Generation

SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening editor. This issue was fixed in version 1.55...

CVE-2025-62729: Improper Neutralization of Input During Web Page Generation

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...