EUVD-2026-89720

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting XSS vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing t...

CVE-2026-93464

A Stored Cross-Site Scripting (XSS) vulnerability (CWE-79) exists in baserCMS due to the handling of custom content descriptions . Exploitation of this flaw allows an attacker to execute arbitrary scripts within a user's web browser. To remediate this issue, users are advised to update the softwa...

CVE-2026-93460

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

EUVD-2026-89661

Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...

EUVD-2026-89475

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

PT-2026-103066

Name of the Vulnerable Software and Affected Versions baserCMS affected versions not specified Description A stored cross-site scripting issue exists where arbitrary scripts can be executed in a user's web browser. This occurs through the use of appended strings within email form fields...

Linux Distros Unpatched Vulnerability : CVE-2026-102831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5....

CVE-2025-63830

📂 CKFinder 1.4.3 – Script intersite stocké XSS via téléchargement SVG malveillant Identifiant CVE : CVE-2025-63830 🧭 Aperçu Une vulnérabilité de script intersite stocké XSS a été identifiée dans CKFinder v1.4.3. Le problème réside dans la fonctionnalité de téléchargement de fichiers , qui ne...

CVE-2026-69662

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

Cross-site Scripting (XSS)

Overview @jupyterlab/apputils is a JupyterLab - Application Utilities Affected versions of this package are vulnerable to Cross-site Scripting XSS via the notebook paste action in packages/notebook/src/actions.tsx, which does not validate whether clipboard data originated from within the...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

poc-cribl-rce

Avertissement Ceci est uniquement à des fins d'information/éducation. Ce document a été assemblé pour démontrer une insécurité dans l'outil, afin qu'un correctif soit vérifié par le fournisseur. Informations Testé sur Cribl v1.5.0 – Les versions antérieures n'ont pas été testées mais sont...

CVE-2023-38831-winrar-exploit

Генератор эксплойтов CVE-2023-38831 для WinRAR Быстрая проверка PoC Сгенерируйте PoC по умолчанию для проверки python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Свой вариант 1. Поместите файл-приманку и вредоносный файл скрипта в...

CVE-2020-14882-WebLogic-Analysis

Ресерч уязвимостей: Эксплуатация цепочки CVE-2020-14882 и CVE-2020-14883 в Oracle WebLogic Server Репозиторий содержит технический отчет Write-up и концептуальный Proof of Concept PoC для демонстрации цепочки уязвимостей обхода авторизации Authentication Bypass и удаленного выполнения кода RCE в...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS: отражённый XSS v3.2.3 Автор: Sergio Описание: Отражённая уязвимость межсайтового скриптинга XSS в процессе подключения при установке Evolution v.3.2.3 позволяет локальному злоумышленнику выполнять произвольные веб-сценарии с помощью специально сформированного пейлоада, внедряемого ...