EUVD-2026-89395

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102329

A Cross-site scripting (XSS) vulnerability exists in the WebUI of Google Chrome prior to version 154.0.8037.92 . This flaw allows a remote attacker to bypass the web origin policy to access a privileged page by navigating the user to a crafted HTML page . No specific exploit code or in-the-wild e...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102831

A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...

CVE-2026-102830 JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in DOMPurify (CVE-2026-41238, CVE-2026-41239, CVE-2026-41240)

Summary Multiple Cross-Site Scripting XSS vulnerabilities in DOMPurify CVE-2026-41238, CVE-2026-41239, CVE-2026-41240 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 3.4.12 on Windows and version 3.4.13 on Linux. Vulnerability Details...

CVE-2020-9496

CVE-2020-9496 XML-RPC 요청은 Apache OFBiz 17.12.03에서 안전하지 않은 역직렬화 및 크로스 사이트 스크립팅 문제에 취약합니다. 설치 요구 사항 $ pip install -r requirements.txt $ wget https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar -O ysoserial.jar 사용법 $ python cve-2020-9496.py --target URL 테스트...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server 사용 방법 $ docker-compose up Docker Hub로부터 사용 $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...

CVE-2015-9251

CVE-2015-9251 [email protected] CVE-2015-9251 및 jQuery 3.0.0 미만 버전에 대한 PoC. CVE-2015-9251 - PoC 익스플로잇 이 저장소는 jQuery 라이브러리의 취약점 CVE-2015-9251 에 대한 Proof of Concept PoC을 포함합니다. 이 취약점은 jQuery 3.0.0 미만 버전에서 callback 매개변수에 코드 삽입을 허용하여, 위생 처리되지 않은 JSONP 호출을 통한 크로스 사이트 스크립팅XSS 공격을 가능하게 합니다. 설명...

CVE-2026-100238

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from before 1.46.1, 1.45.5, 1.43.10...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to...

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitado a través de la página "Proxy Error" en Apache HTTP Server En Apache HTTP Server 2.4.0-2.4.39, se informó de un problema limitado de cross-site scripting que afectaba a la página de error de modproxy. Un atacante podía provocar que el enlace de la pági...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

Joplin-CVE-2022-35131

Joplin CVE-2022-35131 Joplin 2.8.8 및 이전 버전에 영향을 미치는 XSS로, 원격 코드 실행RCE으로 이어집니다. Windows 및 Linux에서 테스트되었으며 동작합니다. 보고 및 수정: 2022-06 기술 개요 1. 자바스크립트 페이로드를 제목으로 사용하여 메모를 생성합니다아래 POC 참조. 2. Ctrl+P를 누르고 메모 또는 제목에서 무언가를 검색합니다. 3. 페이로드는 검색 결과에 표시될 때 실행됩니다. 4. 노트북을 공유하여 원격 코드 실행을 달성할 수 있습니다. 문제는...

blindxss-lite

blindxss-lite Flask로 구축된 경량 Blind XSSCross-Site Scripting 수집기 및 페이로드 서버입니다. 피해자 브라우저 데이터쿠키, localStorage, DOM 스니펫 등를 캡처하여 HTTP Basic Auth로 보호되는 SQLite 기반 대시보드로 전달하는 JavaScript 페이로드를 제공합니다. 기능 페이로드 전달 — /p.js는 sendBeacon 또는 fetch를 사용하는 자체 포함 JS 페이로드를 제공합니다 수집기 엔드포인트 — POST /c JSON/FormData 및 GET...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 본인이 발견한 취약점 CVE-2019-15053 권고: advisory.txt 기본 정보 Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested Versions....: 1.4.2 Vulnerability...

CVE-2022-43117

제안된 설명 Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0에서 Name, Username, Description 및 Site Feature 매개변수를 통해 여러 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 추가 정보 Proof Of Concept: https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing Vendor Homepage:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 packages and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.16 security update

Red Hat build of MicroShift release 4.22.16 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...