CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias

ZenarioCMS 反射型 XSS v.9.4.59197 著者: Sergio 説明: ZenarioCMS v.9.4.59197 のクロスサイトスクリプティング XSS の脆弱性により、ローカル攻撃者が細工したスクリプトを Organizer - Spare alias に送信することで任意のコードを実行できる可能性があります。 攻撃ベクトル: Spare alias の入力に対するサニタイズ処理の脆弱性を利用し、ユーザーが Web ページにアクセスしたときに実行される JavaScript コードを注入できます。 POC: パネルにログインしたら、Organizer...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation これは CVE-2021-21315 の Proof of Concept です。この脆弱性は Node.JS 用の System Information ライブラリ（npm パッケージ "systeminformation"）に影響します。npmjs.com/systeminformation "si.inetLatency、si.inetChecksite、si.services、si.processLoad に渡される service パラメータを必ずチェックまたはサニタイズしてください...

CVE-2022-40317

CVE-2022-40317 메모에 저장된 XSS 애플리케이션의 메모 섹션에서 저장 XSS가 발견되었습니다. OpenKM을 사용하는 클라이언트를 펜테스트하는 중이었습니다. 기본적으로 메모를 저장할 때 일반 HTML이 허용되었고 그대로 렌더링되었습니다. 아시다시피, 태그와 JavaScript on- 이벤트는 XSS 정화 규칙의 일부로 정리/대체되었습니다. 그러나 태그에서 javascript&colon:을 사용하면 해당 정화/대체 규칙을 우회할 수 있음을 발견했습니다. 이슈를 재현하려면 메모 섹션에 다음 페이로드를 제출하세요...

CVE-2026-36214

CVE-2026-36214 - osTicket의 취약한 Bootstrap Tooltip 구성요소를 통한 저장형 교차 사이트 스크립팅 XSS 설명 Enhancesoft osTicket 버전 1.10부터 1.17.7, 1.18.0부터 1.18.3에는 취약한 Bootstrap Tooltip 3.3.4 구성요소CVE-2019-8331가 포함되어 있어 저장형 교차 사이트 스크립팅XSS 취약점이 발생합니다. 기본 osTicket 구성에서 티켓 제출자"사용자"는 사전 인증 없이 티켓을 제출할 수 있으며, 사용자 자체 등록도 기본적으로...

cve-2026-9082

CVE-2026-9082 类型 ：SQL 注入 CWE-89 受影响产品 ：Drupal 核心（数据库抽象 API） Drupal 公告 ：SA-CORE-2026-004 发布时间 ：2026 年 5 月 20 日 严重性 ：高度严重（Drupal 20/25 | NVD CVSS 6.5） 这是什么？ CVE-2026-9082 是 Drupal 核心数据库抽象 API 中的一个 SQL 注入 漏洞。Drupal 的数据库层封装了 PDO 并在查询到达数据库之前对所有查询进行净化处理。此漏洞针对 PostgreSQL 后端 绕过了这一净化机制——精心构造的 HTTP...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS 格納型XSS v.9.2.1 作成者: Sergio 説明: ConcreteCMS v.9.2.1 には、ローカルの攻撃者が「SEO & Statistics」のヘッダーおよびフッタートラッキングコードに細工したスクリプトを注入することで任意のコードを実行できる、複数のクロスサイトスクリプティング（XSS）脆弱性が存在します。 攻撃ベクトル: スクリプティング。「SEO &...

CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description

Quick CMS Stored XSS v6.7 著者: Sergio 説明: Quick CMS v6.7 のクロスサイトスクリプティング XSS の脆弱性により、ローカルの攻撃者が、Pages Menu の SEO - Meta description に対して細工されたスクリプトを介して任意のコードを実行できます。 攻撃ベクトル: スクリプティング。Pages-SEO の Meta description への入力のサニタイズ処理における脆弱性により、ユーザーがWebページにアクセスしたときに実行されるJavaScriptコードを注入することが可能です。 POC:...

EUVD-2026-86384

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass...

CVE-2026-61825

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...

CVE-2026-61825

The code16/sharp Laravel-based framework is vulnerable to stored cross-site scripting (XSS) in versions before 9.22.5 . The flaw exists within the SharpEditorFormField component, where attacker-controlled content using the data-html-content attribute can bypass HTML sanitization to preserve and e...

CVE-2026-61825: Improper Neutralization of Input During Web Page Generation

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...

DRUPAL-CONTRIB-2026-191

The Diba Carousel Slider adds a Bootstrap carousel slider block that can be used directly without creating a View or custom integration. When the "Allow HTML description" option is enabled, slide descriptions are rendered using the raw stored field value instead of the field's rendered output. Th...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

GO-2026-6467 Traefik entrypoint header-name sanitization bypassed via request trailers in github.com/traefik/traefik

Traefik entrypoint header-name sanitization bypassed via request trailers in github.com/traefik/traefik...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

Astra Linux – Vulnerability in Golang-1.19

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...