CVE-2025-13401-XSS-Stored

概念验证：Autoptimize 标签。 在版本 3.1.13 中，该函数采用“黑名单”方法（通过 pregreplace）在将原始 标签转换为 标签之前，移除特定属性如 title、alt、class、id、width 和 height。然而，它未能移除事件处理属性如 onload 或 onerror。 经过身份验证的攻击者（至少拥有贡献者角色）可以在帖子中嵌入恶意的 标签。当插件处理该帖子以生成预加载链接时，恶意的事件处理程序被保留并注入到页面 中的 标签内。由于 支持 onload 事件，当资源加载时，JavaScript 会执行。 漏洞代码（v3.1.13） //...

cve-2025-4664

CVE-2025-4664 此仓库包含用于利用 CVE-2025-4664 的 PoC。该漏洞可使基于 Chromium 的浏览器通过 Link 标头预加载请求泄露敏感的 URL 参数。 资源 有关此漏洞利用原理的详细说明，请阅读博客文章：https://amalmurali.me/posts/cve-2025-4664e。 观看以下视频以了解整个流程： 文件 target.py - 存在漏洞的 Web 应用程序 idp.py - SSO 身份提供程序 attacker.py - 记录已泄漏令牌的恶意服务器 templates/ - 演示所用的 HTML 模板 static/ -...

cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi a RCE Este repositorio contiene un laboratorio local y un exploit corto para la inyección SQL en PostgreSQL de Drupal JSON:API descrita en el artículo de Ambionics. La parte importante del exploit es la escalada de PostgreSQL: una vez que la inyección puede...

CVE-2026-43499-T807D

T807D Producto final — Paquete de recuperación de correspondencia uno a uno con el código fuente Fecha de generación: 2026-08-08 Conclusión Este directorio ya ha organizado el árbol de código fuente completo de popsicle que se puede recuperar del proyecto actual, los encabezados necesarios, la...

CVE-2026-104848

The Tinypool minimal Node.js worker thread pool implementation is vulnerable to a Prototype Pollution gadget in versions prior to 2.1.1 . The root cause is located in dist/index.js, where the software constructs ThreadPool.options from a normal options object and reads execArgv and env worker opt...

CVE-2026-102677

A flaw was found in Electron. The cache mechanism for sandboxed preload scripts fails to verify that cached entries match the requested script. In applications that load untrusted web content, an attacker with a compromised renderer process can write malicious data into the cache to be reused on...

CVE-2026-102677

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

NPM: Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

NPM: Electron: Sandboxed preload code cache can be poisoned by a compromised renderer vulnerability discovered by ? in WordPress Npm electron versions = 42.3.3, 42.10.0...

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Impact The cache Electron keeps for sandboxed preload scripts did not verify that a cached entry matched the preload it was served for. A compromised renderer could use this to run its own code in the preload context on a later load. Apps are only affected if they load untrusted content. Apps tha...

Protection Mechanism Failure

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Protection Mechanism Failure via insufficient keying of sandboxed preload script code cache entries, allowing a renderer...

EUVD-2026-89179

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-102677 Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-102677

The Electron framework (versions 42.3.3 to 42.10.0 , 43.5.0 , and 44.0.0-beta.6 ) is vulnerable to a sandboxed preload code cache poisoning issue. The root cause is a lack of verification ensuring that a cached entry matches the preload it was originally served for. A compromised renderer can inj...

CVE-2026-102677 Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-102677: Improper Input Validation

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

PT-2026-102756

Name of the Vulnerable Software and Affected Versions Electron versions 42.3.3 through 42.9.9 Electron versions 43.0.0 through 43.4.9 Electron versions 44.0.0-beta.0 through 44.0.0-beta.5 Description The sandboxed preload code cache fails to verify that a cached entry matches the preload it was...

PT-2026-96263

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description The ToolExecutor LD PRELOAD sandbox fails to hook the fexecve function, although it hooks execve, execvpe, and execveat to prevent subprocess creation. An authenticated attacker with the ability t...

PT-2026-96264

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description Function-library code running under the LD PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback. This allows the dlopen call-stack heuristic to identify a Python...

SUSE CVE-2026-72293

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...

Chromium: CVE-2026-79031 Improper resource exposure in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...