27844 matches found
CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend
Quick CMS XSS Almacenado v6.7 Autor: Sergio Descripción: Una vulnerabilidad de Cross-Site Scripting XSS en Quick CMS v6.7 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el Frontend y backend - Páginas en el Menú de Idiomas. Vectores de ataque: Scripting. U...
CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-
Evolution CMS XSS Reflejado v3.2.3 Autor: Sergio Descripción: Una vulnerabilidad de cross-site scripting XSS reflejado en el proceso de conexión de la instalación de Evolution v.3.2.3 permite a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el...
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple 存储型XSS漏洞 v2.2.18 作者：Sergio 描述： CMSmadesimple v.2.2.18 中存在跨站脚本漏洞，本地攻击者可通过文件选择器菜单中的顶部目录字段注入恶意脚本，从而执行任意代码。 攻击向量： 脚本注入漏洞。文件选择器菜单中“顶部目录”字段的输入过滤不严，允许注入JavaScript代码，当用户访问网页时该代码将被执行。 漏洞利用演示（POC）： 登录后台后，我们进入常规菜单下的“文件选择器扩展 - 顶部目录”部分。 编辑我们已创建的顶部目录菜单，可以看到可以在全局元数据字段中注入任意JavaScript代码。 XSS Payload...
CVE-2023-44762_ConcreteCMS-Reflected-XSS---Tags
ConcreteCMS 反射型XSS v.9.2.1 作者: Sergio 描述: ConcreteCMS v.9.2.1 中存在跨站脚本漏洞，允许本地攻击者通过向"设置 - 标签"中的标签字段注入特制脚本来执行任意代码。 攻击向量: "设置 - 标签"中标签输入清理机制存在漏洞，允许注入JavaScript代码，当用户访问网页时这些代码将被执行。 概念验证: 登录面板后，我们将进入"仪表盘菜单中的设置 - 标签"部分。 XSS 载荷: root@kitploit: 在下图中，你可以看到嵌入的代码，该代码在主网页中执行载荷。 附加信息:...
CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files
Quick CMS 存储型XSS v6.7 作者: Sergio 描述: Quick CMS v6.7 中的多个跨站脚本（XSS）漏洞允许本地攻击者通过精心编制的脚本在页面菜单中的文件 - 描述处执行任意代码。 攻击向量: 脚本注入：对“页面-文件菜单”中描述字段的清理存在漏洞，允许注入JavaScript代码，当用户访问网页时该代码将被执行。 POC: 登录面板后，我们将进入常规菜单中的“页面 - 文件”部分。 我们编辑该描述设置，发现可以在描述字段中注入任意JavaScript代码。 XSS Payload: root@kitploit: '"...
CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager
CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de cross-site scripting XSS en CMSmadesimple v.2.2.18 permiten a un atacante local ejecutar código arbitrario mediante un script manipulado en los datos Page Specific Metadata y Smarty del Menú de...
CVE-2026-45761
A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media
WBCE File Upload XSS - WBCE v1.6.1 Autor: Sergio Descripción: Vulnerabilidad de subida de archivos en WBCE v.1.6.1 que permite a un atacante local subir un archivo PDF con XSS oculto. Vectores de ataque: Una vulnerabilidad en la sanitización de la subida de archivos multimedia permite subir un...
CVE-2026-76920
A flaw was found in Wireshark. This vulnerability, located in the 3gpp phone log file parser, could allow a local attacker to trigger a crash by enticing a user to open a specially crafted log file. This could lead to a Denial of Service DoS. Mitigation To mitigate this issue, users should avoid...
CVE-2026-72099
A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hashoffset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service...
CVE-2026-77159
A symlink-following flaw in libvirt's qemuTPMEmulatorPrepareHost() function performs a path-based chown() on the swtpm log file without validating for symbolic links. A local attacker with access to the swtpm account can replace the log file with a symlink, causing the root-level libvirtd daemon ...
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension
CMSmadesimple 存储型XSS v2.2.18 作者: Sergio 描述: CMSmadesimple v.2.2.18 中的跨站脚本漏洞允许本地攻击者通过向扩展 - MicroTiny WYSIWYG 编辑器中的配置文件注入恶意脚本来执行任意代码。 攻击向量: 对"MicroTiny WYSIWYG 编辑器"配置文件中输入内容进行消毒处理时存在漏洞，允许注入 JavaScript 代码，当用户访问网页时该代码将被执行。 POC: 登录系统后台后，我们将从主菜单进入"扩展 - MicroTiny WYSIWYG 编辑器"部分。 我们使用创建的 payload 编辑该...
CVE-2026-88051
A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A heap out-of-bounds write vulnerability exists in the GenericVector::read function when processing a specially crafted .traineddata model. By manipulating the reserved and sizeused fields, a local attacker ca...
CVE-2023-44761_ConcreteCMS-Stored-XSS---Forms
ConcreteCMS XSS Almacenado v.9.2.1 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross Site Scripting en ConcreteCMS v.9.2.1 permiten a un atacante local ejecutar código arbitrario a través de un script manipulado en los Formularios de los objetos de Datos. Vectores de ataque: Una...
CockpitCMS-Arbitrary-File-Upload--XSS---Assets
Cockpit CMS 2.7.0 Carga de archivos - XSS Autor: Sergio Descripción: Vulnerabilidad de subida de archivos en Cockpit CMS 2.7.0 que permite a un atacante local subir un archivo PDF con XSS oculto. Vectores de ataque: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L PoC: Esta es la versión del software. Este es...
EUVD-2026-75802
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
EUVD-2026-76184
An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...
CVE-2026-78807
CVE-2026-78807 affects wpa_supplicant (all versions before v.2.12 ) due to missing validation in the driver-based PMKSA selection path in wpa.c. A local attacker with low privileges can bypass proper network context and AKMP matching for PMKSA caching , resulting in high confidentiality and integ...