CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 프로토타입 오염 및 JS 인젝션 체인 — 연구 PoC 개요 이 레포지토리는 2026년 Adobe Acrobat Reader의 실제 익스플로잇 체인 분석 중 개발된 연구 자료와 개념 증명 코드를 포함합니다. 해당 체인은 다음을 포함합니다: 프로토타입 오염 내부 JavaScript 인젝션 신뢰된 워크플로우 악용 패치 차이 분석 권한 있는 JavaScript 실행 이 연구는 악성 PDF 문서에 사용된 취약점 체인을 이해하고 Adobe가 여러 패치를 통해 도입한 수정 사...

CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 이 저장소는 Chromium 웹 브라우저의 취약점인 CVE-2024-5836 및 CVE-2024-6778에 대한 개념 증명 익스플로잇을 포함합니다. 이 취약점을 통해 브라우저 확장 프로그램에서 샌드박스 이스케이프가 가능했습니다. 이를 실행하려면 126.0.6478.54보다 오래된 Chromium 버전을 사용해야 합니다. 분석 글: https://ading.dev/blog/posts/chromesandboxescape.html 버그 리포트:...

cve-2024-4367-poc

CVE-2024-4367 POC（PDF.js 用） PDF.js の CVE-2024-4367 脆弱性の POC - pdf-modify.py スクリプトは、PDF を変更してペイロードを注入するために使用できます。 使用方法 1. CVE-2024-4367-POC-base-placeholder.pdf が作業ディレクトリにあることを確認してください。 2. pdf-modify.py 内の payloadnew 変数をコメント解除して修正してください。 3. 引数なしで python pdf-modify.py を実行してください。 4...

CVE-2024-4367

CVE-2024-4367 POC 사용법 root@kitploit: python poc.py mal.pdf "alert'0x2r2'" 참고 자료 CVE-2024-4367: PDF.js에서 임의 JS 실행 PDF.js POC 스캐너 템플릿...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 は PDF.js における重大な脆弱性（CVSS 9.8）であり、PDF ファイル内の FontMatrix オブジェクトに対する型チェックの不備により、任意の JavaScript コード実行が可能になります。 CVE-2024-4367 エクスプロイトウィザード：ユーザーガイド CVE 識別子| CVE-2024-4367 ---|--- 深刻度| 重大（CVSS スコア：9.8） 脆弱性| FontMatrix オブジェクトに対する型チェックの不備による PDF.js での任意の JavaScript...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-44670

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View AV / database names without any HTML escape, then a render template uses raw strings.ReplaceAlltpl, "$avName", nodeAvName to embed the name in HTML before pushing to all clients via...

CVE-2025-25477

A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser...

GHSA-78VG-7V27-HJ67 auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped

Summary Unescaped entity property enables Javascript injection. Details I think this is possible because %sourcelabel% in twig macro is not escaped. Therefore script tags can be inserted and are executed. PoC - clone example project https://github.com/DamienHarper/auditor-bundle-demo - create...

CVE-2024-29831

CVE-2024-29831 relates to an improper input validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server, potentially enabling remote code execution. Affected: DolphinScheduler; remediation guidance consistentl...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367 POC Usage bash python poc.py malicious.p...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

HTML Injection

ethyca-fides is vulnerable to HTML Injection. The vulnerability arises due lack of of input validation coming from connected systems and data stores which is reflected in the downloaded data. This results in an HTML injection that can be abused to perform phishing attacks or malicious JS executio...

CVE-2023-30736

The CVE-2023-30736 entry concerns Samsung Assistant’s PushMsgReceiver, where improper authorization prior to version 8.7.00.1 allows an attacker to trigger a javascript interface. Affected software is Samsung Assistant on devices supporting versions before 8.7.00.1. The vulnerability requires use...

CVE-2023-22475

CVE-2023-22475 affects Canarytokens. The issue is a Cross-Site Scripting vulnerability in the history page of triggered Canarytokens prior to sha-fb61290, allowing an attacker who discovers an HTTP-based Canarytoken URL to execute JavaScript when the history page is viewed by the token’s creator....

U.S. Department of State: RXSS on https://travel.state.gov/content/travel/en/search.html

Vulnerability description not provided...

Cross site scripting

A Stored Cross Site Scripting XSS issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin or non-Admin users that can see other users logged into the platform clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 an...