SiYuan Note - Cross-Site Scripting

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

AvantFAX 3.3.3 - Cross-Site Scripting

AvantFAX 3.3.3 contains a cross-site scripting vulnerability via an arbitrary parameter name submitted to the default URL, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1. id: CVE-2017-18024 info: name: AvantFAX 3.3.3 - Cross-Site Scripting author: pikpikc...

phpLDAPadmin <= 1.2.3 - Reflected XSS

phpLDAPadmin = 1.2.3 contains a reflected cross-site scripting caused by unsanitized input in htdocs/entrychooser.php via the form, element, rdn, or container parameter, letting attackers execute malicious scripts in victim browsers, exploit requires sending crafted input. id: CVE-2017-11107 info...

SiYuan <= v3.5.9 - SVG Animate Element XSS

SiYuan = v3.5.9 contains a reflected XSS caused by insufficient SVG sanitization allowing SVG animation elements to inject executable JavaScript in /api/icon/getDynamicIcon endpoint, letting unauthenticated attackers execute scripts. id: CVE-2026-31807 info: name: SiYuan = v3.5.9 - SVG Animate...

DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options Update

DynamiApps Frontend Admin plugin for WordPress .= 3.28.20 contains a broken access control vulnerability caused by insufficient capability checks and input validation in ActionOptions::run save handler, letting unauthenticated attackers modify critical WordPress options via crafted form data. id:...

LumisXP <10.0.0 - Blind XML External Entity Attack

LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XML external entity XXE attacks via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service. id:...

HashCheck

PasswordHashCheck 이 프로젝트는 k-익명성 방법을 사용하여 높은 수준의 개인정보를 유지하면서 유출된 비밀번호를 검색하는 데 도움을 주기 위한 것입니다. 이를 위해 다양한 서비스의 API를 사용하며, 확인하려는 비밀번호의 해시 일부예: 처음 5자만 전송합니다. 사전 요구사항 프로젝트가 작동하려면 일부 라이브러리가 필요합니다. 설치하려면 다음 명령어를 사용하세요: pip install -r requirements Python 3이 필요하다는 점을 기억하세요. 사용법 passme.py FUNC ELEMENT -engi...

CVE-2023-6933

CVE-2023-6933 취약점 소개 설명 "Better Search Replace" 플러그인은 WordPress용으로 PHP 객체 주입으로 알려진 심각한 취약점을 보여줍니다. 이 보안 결함은 버전 1.4.4까지의 모든 버전에 존재합니다. 이는 신뢰할 수 없는 입력의 역직렬화에서 비롯되어, 인증되지 않은 공격자가 시스템에 PHP 객체를 주입할 수 있게 합니다. 주목할 점은 플러그인 자체에는 PHP 객체 주입POI 체인이 포함되어 있지 않습니다. 그러나 대상 시스템에 POI 체인이 포함된 다른 취약한 플러그인이나 테마가 설치되어...

bluemonday

bluemonday bluemonday는 Go로 구현된 HTML 살균기sanitizer입니다. 빠르고 설정이 매우 자유롭습니다. bluemonday는 신뢰할 수 없는 사용자 생성 콘텐츠를 입력으로 받아, 승인된 HTML 요소 및 속성의 허용 목록allowlist을 기준으로 살균된 HTML을 반환합니다. 따라서 해당 콘텐츠를 웹 페이지에 안전하게 포함할 수 있습니다. 사용자 생성 콘텐츠를 받아들이고 서버가 Go를 사용한다면, 반드시 bluemonday가 필요합니다. 사용자 생성 콘텐츠를 위한 기본...

mssqli-duet

MSSQLi-DUET - MSSQL 주입 기반 도메인 사용자 열거 도구 Active Directory 환경에서 RID 무차별 대입을 기반으로 도메인 사용자를 추출하는 MSSQL용 SQL 주입 스크립트입니다. SQLmap의 탐지 회피 함수 구현을 통해 다양한 WAF 우회 기술을 지원합니다. 상황과 환경에 따라 사용자가 추가 탐지 회피 함수를 통합할 수 있습니다. 두 가지 형태로 제공됩니다: 터미널에서 사용할 수 있는 직접적인 Python 스크립트 또는 간단한 GUI 탐색을 위한 Burp Suite 플러그인. 현재는 유니온 기반...

PT-2026-107956

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-4023)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal...

EulerOS 2.0 SP15 : shim (EulerOS-SA-2026-4017)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a...

EulerOS 2.0 SP15 : shim (EulerOS-SA-2026-3951)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3894)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3960)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...

EulerOS 2.0 SP15 : glib2 (EulerOS-SA-2026-3910)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file...

EulerOS 2.0 SP15 : glib2 (EulerOS-SA-2026-3976)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file...

PT-2026-108706

Summary Resolver::processReferences collects elements with the XPath predicate use@href or @xlink:href, which is case sensitive. A element written as xlink:HrEf is therefore never added to the reference graph, so the nesting-DoS nullification never marks it for removal...

PT-2026-108198

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode all API can cause the application...