CrazyToolBox

CrazyToolBox Table of contents 📢 What is CrazyToolBox? ⚙️ Execution ⭐ Current features 📢 What is CrazyToolBox? CrazyToolBox is a collection of usefult tools relative to Web3. These tools can be accessed through a GUI using the CrazyToolBox application. We will be adding new tools to the...

EUVD-2026-124559

Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack...

essential-addons-for-elementor-xss-poc

🔍 Essential Addons for Elementor XSS Vulnerability Detector 🚨 Critical Information This tool is for security research and patching purposes only. Do not use it to harm sites. If you find vulnerable sites, report them responsibly to site owners so they can update immediately. ⚠️ Vulnerability...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...

EUVD-2026-124557

Soup Sieve: General sibling combinator inside :has matches untrusted HTML in quadratic time...

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Summary Matching a selector that puts a general-sibling combinator inside :has, such as div:hasa b, against untrusted HTML runs in On² time in the number of sibling elements. A single small document with a few thousand siblings ties the process up for a minute of CPU, so an application that runs ...

UBUNTU-CVE-2026-126190

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polynomial degree of the work on deeply nested attacker-influenc...

UBUNTU-CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126190

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polynomial degree of the work on deeply nested attacker-influenc...

CVE-2026-126189

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0.1, Soup Sieve repeatedly searches descendant subtrees for each candidate evaluated by :has and repeatedly reevaluates a parent containing :has ... for each child, causing quadratic matching on deeply nest...

CVE-2026-126190

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polynomial degree of the work on deeply nested attacker-influenc...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126193

Soup Sieve is a CSS selector library for Beautiful Soup. From 0.4 until 3.0, deeply nested CSS pseudo-class selectors can cause recursive parsing to exceed Python’s recursion limit and raise RecursionError . Applications accepting untrusted selectors may experience failure of the affected request...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192

The Soup Sieve CSS selector library (versions prior to 2.10 ) is vulnerable to an algorithmic complexity issue. When processing attacker-controlled HTML, a developer-authored selector that places a general sibling combinator inside a :has() pseudo-class (e.g., div:has(a ~ b)) causes the library t...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126191

The Soup Sieve CSS selector library, used with Beautiful Soup 4 , is vulnerable to exponential regular-expression backtracking in versions prior to 3.0 . The vulnerability exists because the CSS_ESCAPES and IDENTIFIER subpatterns can backtrack exponentially when processing ambiguous digit escapes...