CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Ejecución suspendida de Kubernetes CronJob mediante manipulación del tiempo Código del programa YAML + exploit en Python root@kitploit: cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec:...

CVE-2026-25594

CVE-2026-25594 — XSS Almacenado a través del Nombre de Familia en InvoicePlane 1.7.0 Vulnerabilidad: Cross-Site Scripting XSS Almacenado a través del campo Nombre de Familia Producto: InvoicePlane Versión afectada: 1.7.0 y probablemente versiones anteriores Gravedad: Media Puntuación CVSS 3.1: 4....

CVE-2026-29115

CVE-2026-29115 — 大华（Dahua）已验证身份的远程拒绝服务漏洞 公告类型： 厂商协调安全披露 CVE ID： CVE-2026-29115 厂商： 大华技术（Dahua Technology） 发布时间： 2026-06-10T06:08:21 UTC 最后修改时间： 2026-06-10T06:08:21 UTC 来源： 大华产品安全事件（PSI）信任中心 目录 执行摘要 概览 与 CVE-2026-29116 的关系 漏洞时间线 描述 技术分析 受影响的产品 CVSS 评分 漏洞评分详情 CWE 分类 攻击前提条件 利用场景 影响评估 检测与入侵指标 缓解与修复...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - 通过日志文件泄露敏感信息 root@kitploit: 描述： WordPress 插件 Cloud Templates & Patterns collection 在 1.2.2（含）及之前的所有版本中，因日志文件名称可预测而存在敏感信息泄露漏洞。未经身份验证的攻击者可以借此提取敏感数据。 严重性：中等 CVE ID: CVE-2023-47529 CVSS Score: 5.3 CVSS Metrics:...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 漏洞标题: Vehicle Service Management System - 'MyAccount' 存储型跨站脚本（XSS） 漏洞作者: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 中危 参考链接: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46068...

CVE-2017-0055-PoC

CVE-2017-0055 PoC 微软 IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ 跨站脚本 Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 基础评分：6.1 严重级别：中 利用： http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

CVE-2025-0133

CVE-2025-0133 漏洞扫描器 一个基于Bash的自动化扫描工具，用于检测 Palo Alto GlobalProtect 网关和门户 中的 CVE-2025-0133 反射型XSS漏洞，使用 nuclei 和 shodanx。 作者 : 日期 : 2025-06-23 严重性 : 中 CVE ID : CVE-2025-0133 漏洞类型 : 反射型跨站脚本 XSS 测试对象 : Palo Alto Networks GlobalProtect 门户 PAN-OS 概述...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 漏洞名称：Vehicle Service Management System - '多处'文件上传导致存储型跨站脚本攻击 漏洞作者：SANU P.L CVE：CVE-2021-46078 CVSS：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2021-46078...

DEBIAN-CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87645

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87615

Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-87589

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87573

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87559

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87562

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87559

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87541

Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87484

UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...