CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS 存储型 XSS v.9.2.1 作者：Sergio 描述： ConcreteCMS v.9.2.1 中存在多个跨站脚本（Cross Site Scripting）漏洞，本地攻击者可以通过向 SEO 与统计（SEO & Statistics）中的页眉和页脚跟踪代码（Header and Footer Tracking Codes）注入精心构造的脚本，从而执行任意代码。 攻击向量： 脚本注入。SEO 与统计（SEO & Statistics）中的页眉和页脚跟踪代码（Header and Footer Tracking Codes）在输入清理环节存在漏洞，允许注入...

CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description

Quick CMS 存储型 XSS v6.7 作者：Sergio 描述： Quick CMS v6.7 中存在一个跨站脚本（XSS）漏洞，允许本地攻击者通过向“页面菜单”中的 SEO - Meta 描述注入精心构造的脚本来执行任意代码。 攻击向量： 在“页面 - SEO”的 Meta 描述输入项清理过程中存在漏洞，允许注入 JavaScript 代码，当用户访问网页时该代码将被执行。 POC（概念验证）： 登录后台后，我们将进入“常规菜单”中的“页面 - SEO”部分。 我们编辑该 SEO 设置，可以看到可以在 Meta 描述字段中注入任意 JavaScript 代码。 XSS...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation Esto es una prueba de concepto para CVE-2021-21315 que afecta a The System Information Library para Node.JS paquete npm "systeminformation". npmjs.com/systeminformation "asegúrese de comprobar o sanear los parámetros de servicio que se pasan a si.inetLatency,...

CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias

ZenarioCMS 反射型XSS v.9.4.59197 作者：Sergio 描述： ZenarioCMS v.9.4.59197 中存在跨站脚本（XSS）漏洞，允许本地攻击者通过特制脚本向 Organizer - Spare alias 执行任意代码。 攻击向量： Spare alias 中对输入的净化处理存在脚本漏洞，允许注入 JavaScript 代码，当用户访问网页时将执行该代码。 POC: 登录面板后，我们将转到 Organizer 菜单中的“Organizer - Spare alias”。 我们点击“Create a spare alias”，然后在 Spare alia...

CVE-2022-40317

CVE-2022-40317 Stored XSS in Notes A stored XSS was found in the notes section of the application while we were pentesting a client that was using OpenKM. Basically, when storing notes, somehow normal HTML was allowed and it was rendered as is. As you know, However, we found that using...

cve-2026-9082

CVE-2026-9082 类型 ：SQL 注入 CWE-89 受影响产品 ：Drupal 核心（数据库抽象 API） Drupal 公告 ：SA-CORE-2026-004 发布时间 ：2026 年 5 月 20 日 严重性 ：高度严重（Drupal 20/25 | NVD CVSS 6.5） 这是什么？ CVE-2026-9082 是 Drupal 核心数据库抽象 API 中的一个 SQL 注入 漏洞。Drupal 的数据库层封装了 PDO 并在查询到达数据库之前对所有查询进行净化处理。此漏洞针对 PostgreSQL 后端 绕过了这一净化机制——精心构造的 HTTP...

CVE-2026-85061

MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

PT-2026-85245

MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...

CVE-2026-36214

CVE-2026-36214 - Stored Cross-Site Scripting XSS in osTicket via Vulnerable Bootstrap Tooltip Component Description Enhancesoft osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 ship with the known-vulnerable Bootstrap Tooltip 3.3.4 component CVE-2019-8331, which introduces a...

CVE-2026-3851

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy JSON format in all versions up to, and including, 4.27.6. This is due to two compounding flaws: 1 the save-time sanitization filter etbuildersanitizedynamiccontentfields only searche...

CVE-2026-3851 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content (Legacy JSON Format) Shortcode

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy JSON format in all versions up to, and including, 4.27.6. This is due to two compounding flaws: 1 the save-time sanitization filter etbuildersanitizedynamiccontentfields only searche...

EUVD-2026-69830

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy JSON format in all versions up to, and including, 4.27.6. This is due to two compounding flaws: 1 the save-time sanitization filter etbuildersanitizedynamiccontentfields only searche...

CVE-2026-73524 Cypht < 2.12.2 XSS via FROM Email Header in Contacts Module

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...

CVE-2026-73704

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-73704

A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...

EUVD-2026-69431

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-73704 Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...