CVE-2026-104477

The Showdown library (versions through 2.1.0 ) is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the makehtml link and image subparsers. The root cause is the failure to properly sanitize or escape double quotes in destination URLs when rendering HTML attributes like href and src. A re...

CVE-2026-104477 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

CVE-2026-104477 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

CVE-2026-104477 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

GHSA-PQXW-G93W-HJ9X Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise

Summary Self-hosted trigger.dev v4 instances deployed using the provided Docker Compose configuration with default secrets from hosting/docker/.env.example are vulnerable to a multi-stage unauthenticated attack chain leading to complete infrastructure compromise. Vulnerability Details The...

tryhackme-moniker-link

tryhackme-moniker-link توثيق لمختبر Moniker Link CVE-2024-21413 الذي أكملته عمليًا على TryHackMe. مختبر Moniker Link CVE-2024-21413 — TryHackMe نظرة عامة يوثّق هذا المستودع دراستي العملية في إحدى غرف TryHackMe. كان الهدف من هذا التمرين فهم كيفية عمل الثغرة واختبارها ضد جهاز معرّض للخطر عمدًا...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO تجاوز المصادقة وتنفيذ الأوامر عن بُعد عبر مستخدم فارغ CVE-2026-19900 بيانات اعتماد ثابتة وتجاوز المصادقة وتنفيذ أوامر عن بُعد عبر مستخدم فارغ. التجاوز عبر الترويسة: Cookie:user=null الاستخدام قم ببناء وتشغيل السكربت مع استهداف مضيف: go build cve-2026-19900-PoC.go...

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

GHSA-96H3-5X6V-M776 Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट श्रृंखला जो TP-Link Omada ER605 DDNS क्लाइंट डेमन cmxddnsd को लक्षित करती है जब डिवाइस Comexe DDNS सेवा का उपयोग करने के लिए कॉन्फ़िगर किया गया हो। ⚠️ कानून...

CVE-2023-41898_Lab

مختبر الروابط العميقة غير المُتحقَّقة منها CVE-2023-41898 هو مختبر تعليمي مُصغَّر لإعادة إنتاج الثغرة، مبني على تقرير الثغرة المنشور GHSL-2023-142 الخاص بـ Home Assistant Companion for Android وعلى البنية مفتوحة المصدر للإصدار الضعيف 2023.8.2. لا تُستخدم أي خوادم أو حسابات أو رموز مميزة tokens...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure مقدمة ستفصّل هذه المقالة اكتشافي على مفتاح Komfy مع الكاميرا من D-Link لاسترجاع اسم شبكة الواي فاي وكلمة المرور المرتبطين بالجهاز عبر بلوتوث 4.0 BLE. مفتاح Komfy هو منتج أمني وأتمتة منزلية يمكنه أن يحل محل مفتاح حائط في منزلك لتوفير مراقبة بالفيديو، ومراقبة...

dlink_shell_poc

dlinkshellpoc PoC لشل Dlink تم الاختبار على D-Link 815 الإصدار A 1.3 يعمل مع: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 ملاحظة: كود PoC لا يتعامل مع الكابتشا. مثال root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...

CVE-2026-104454

YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an On^2 markdown-link regex. Unauthenticated attackers can submit a small crafted body of bracket characters to the page-edit preview endpoint to pin PHP-FPM workers and saturate the pool...

EUVD-2026-91465

YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an On^2 markdown-link regex. Unauthenticated attackers can submit a small crafted body of bracket characters to the page-edit preview endpoint to pin PHP-FPM workers and saturate the pool...

CVE-2026-104454

YesWiki versions before 4.6.7 are vulnerable to an algorithmic-complexity denial of service within the wakka.php formatter. The root cause is an O(n^2) markdown-link regular expression that allows unauthenticated attackers to submit a small, specially crafted body of bracket characters to the pag...

python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

Security update for helm

This update for helm fixes the following issues: CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal...

CVE-2026-95670

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/base64 Redirect in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-95670 No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/base64 Redirect in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...