CVE-2026-113659 ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...

CVE-2026-113659 ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...

lighttpd-win32-dotdot-space

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · lighttpd-win32-dotdot-space lighttpd-win32-dotdot-space Class: File read Reach: Remote lighttpd 1.4.85 4852959 - lighttpd Native WIN32 staticfile joins document-root to relpath after bufferpathsimplify. Simplify only...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files e.g., a JSP web-shell onto the server. Proof-of-concept tool to check for and exploit the unauthenticated file upload vulnerability CVE-2025-31324 in SAP NetWeaver Visual...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

CVE-2026-90898

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2026-113657

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

CVE-2026-113657

The sanitize-html library (versions 2.17.7 through 2.18.0 ) used by ApostropheCMS contains a vulnerability where an application configuration permitting namespace-prefixed SVG animation elements can bypass SMIL URL protection . Because prefixed tag names do not match the unprefixed animation-elem...

CVE-2026-113657 ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

CVE-2026-113657 ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

EUVD-2026-105186

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

CVE-2026-113657 ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

shiro

CVE-2026-49268 — Analysis and Remediation of an LDAP Injection Authentication Bypass Vulnerability | ---|--- Branch| 1.13-CVE-2026-49268 Author| Jinwoo Hwang https://JinwooHwang.com This branch 1.13-CVE-2026-49268 contains a comprehensive security remediation of an LDAP Injection Authentication...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

Gombruc

Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...

Copyfail-sh

copyfail-sh No race. No offsets. No prebuilt binary to blindly trust. A bash implementation of CVE-2026-31431 Copy Fail. The script compiles a minimal C helper inline at runtime. The bash layer handles architecture detection, payload decompression and target selection; the C layer does the actual...

CVE-2026-0596-Reproduction

Below is a structured, markdown-formatted vulnerability research report tailored for a GitHub repository layout such as a README.md or a security-labs write-up. It outlines the context, architecture, reproduction steps, and remediation strategies based on your lab findings. CVE-2026-0596: Arbitra...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — EverShop Second-Order SQL Injection Lab Prerequisites Docker Engine 24+ with Docker Compose v2+ 2 GB free RAM Deploy cd EverShop-Lab/ docker compose up Wait 2 minutes for first build clones EverShop v2.1.0, compiles, runs migrations, seeds data. App will be available at...

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

SPIP BigUp Unauthenticated RCE Exploit CVE-2024-8517 Description This Python script exploits an unauthenticated Remote Code Execution RCE vulnerability in the BigUp plugin of the SPIP CMS Système de Publication pour l'Internet Partagé. The flaw lies in the listerfichiersparchamps function, which...