CVE-2020-12432

CVE-2020-12432 Collabora CODE Click here 4. 피해자가 링크를 열면 모든 쿠키와 로컬 저장소 데이터가 다른 네트워크로 전송된 채 다른 서비스로 리디렉션됩니다. 비디오: https://www.youtube.com/watch?v=tkRnSr6yc0...

CVE-2024-4367-POC-PDFJS

CVE 2024 4367: XSSCross-Site Scripting 익스플로잇을 위한 PoC 1. 경고 표시 XSS 트리거 또 다른 익스플로잇 예시는 공격이 작동하는지 확인하기 위해 간단한 경고 메시지를 주입하는 것입니다. python poc.py "alert'XSS exploit triggered';" 설명 : 이 코드는 페이지에 경고 팝업을 주입하여 XSS 익스플로잇이 대상 사이트에서 실행되는지 빠르게 테스트할 수 있게 합니다. 2. 쿠키 탈취 XSS 공격은 피해자의 쿠키를 탈취하여 악성 서버로 전송하는 데 사용될 수...

br0w

br0w Br0w 해킹하기 | 브라우저를 통해 플레이하고 더 배우며, 재미있게 해킹하세요!! Br0w는 브라우저를 도구로 사용하여 웹 보안에 대해 배우는 간단한 웹입니다. 사람들이 때때로 더 많은 장점을 잊어버리는 브라우저를 활용합니다. 아마도 Capture The Flag CTF에 가깝습니다. 도전 과제 중 하나는 콘솔을 통해 CSS 및 base64 인코딩/디코딩을 비활성화하는 것입니다. 더 많은 도전은 https://labs.tegalsec.org/br0w/ 에서 플레이하세요. 도전 목록 : Chall 1 |...

Kotaemon-CVE-2025-56526-56527-disclosure

Kotaemon CVE-2025-56526 및 CVE-2025-56527 공개 Kotaemon 정보 패널의 저장형 크로스 사이트 스크립팅과 localStorage의 평문 자격 증명 저장이 결합되어, 단일 악성 PDF 업로드로 전체 세션이 손상될 수 있습니다. 요약 영향받는 제품/버전 : Kotaemon = 0.11.0 커밋 37cdc28 포함 취약점 : CVE-2025-56526 – PDF 콘텐츠 렌더링 시 이스케이프 처리되지 않아 발생하는 저장형 XSS CVE-2025-56527 – localStorage에 평문 사용자...

Malicious code in analytics-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b78f3ed716380da74c5d54de6e24b6b128536a7ce5772e8b05d03108a1d9b74 The package is published as 'analytics-widget' with an empty description, but its main module contains no analytics functionality. On load, index.js...

MAL-2026-17163 Malicious code in analytics-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b78f3ed716380da74c5d54de6e24b6b128536a7ce5772e8b05d03108a1d9b74 The package is published as 'analytics-widget' with an empty description, but its main module contains no analytics functionality. On load, index.js...

GHSA-XPJQ-3W4W-W5WR lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...

CVE-2026-86062

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightragwebui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store r...

EUVD-2026-84550

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightragwebui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store r...

PT-2026-96828

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description LightRAG WebUI is subject to stored cross-site scripting XSS because it renders assistant answer and thinking content as raw HTML without an HTML sanitizer. The application uses react-markdown...

CVE-2026-39039

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page...

CVE-2026-39039: Improper Neutralization of Input During Web Page Generation

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page...

CVE-2026-39039

The BharatMLStack software (up to and including v1.3.0 ) contains a vulnerability in the Trufflebox UI where it stores sensitive information in the browser's localStorage . Specifically, the JWT authentication token , full user object , and session ID are stored in a manner that makes them fully ...

CVE-2026-39039

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page...

EUVD-2026-78941

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page...

CVE-2026-39039

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page...

PT-2026-92168

Name of the Vulnerable Software and Affected Versions BharatMLStack versions prior to 1.3.1 Description Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage. This storage mechanism allows any JavaScript running on the page to access the...

Astra Linux – Vulnerability in Firefox

When Firefox is configured to block the storage of all cookies, it is still possible to store data in localstorage by using an iframe with a source of ‘about:blank’. This could allow malicious websites to store tracking data without permission. This vulnerability affects Firefox versions earlier...

CVE-2026-74234

...

CVE-2026-74234

Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...