CVE-2025-14221

描述 1. CVE-2025-14221 2. 发现者：Fatma Trabelsi 3. 产品供应商：SourceCodester 4. 受影响产品：Online Banking System 1.0 POC 在应用程序的用户资料更新功能中存在一个存储型跨站脚本（XSS）漏洞。应用程序未能正确清理用户在“名字”字段中提供的输入，就将其存储到数据库中并在多个页面上渲染。...

CVE-2024-11318

CVE-2024-11318 IDOR - AbsysNet 2.3.1 用户劫持 免责声明 此工具旨在帮助识别和利用特定CVE-2024-11318漏洞的应用程序是否易受攻击。它适用于网络安全专业人员、研究人员和渗透测试人员，在获得明确授权的情况下评估环境的安全性。 如果确认存在漏洞，仅当您拥有应用程序或系统所有者的适当授权时，才能进行利用。 未经授权使用此工具针对您不拥有或未经明确许可测试的系统或网络是非法且不道德的。作者对此工具造成的任何滥用或损害不承担任何责任。 使用此工具即表示您同意遵守所有相关法律和道德标准。在测试或利用漏洞之前，请始终确保您拥有明确许可。 描述 该漏洞影响...

Linux Distros Unpatched Vulnerability : CVE-2026-45048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce...

CVE-2026-69215

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

EUVD-2026-79191

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

CVE-2026-69215

Http4s is a Scala library for HTTP services. Prior to 0.23.35 and 1.0.0-M47 , its CookieJar client middleware uses unanchored substring checks instead of proper RFC 6265 domain and path matching when deciding whether to attach a stored cookie. As a result, a cookie intended for example.com can be...

CVE-2026-69215 Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

CVE-2026-69215 Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

poc-cribl-rce

免责声明 本文档仅供信息/教育目的使用。 编写本文档旨在演示该工具中的一个安全缺陷，以便供应商验证修复方案。 信息 已在 Cribl v1.5.0 上测试 - 未对早期版本进行测试，但可能同样存在漏洞。 有效的 JWT 令牌可以从一个 Cribl 实例传输并注入到另一个 Cribl 实例的会话中，从而使用户获得未经授权的访问权限。 此外，用于生成 JWT/会话的加密密钥可用于为任意用户名创建有效会话，并延长其有效期。 结合 Cribl 中运行脚本的能力，远程攻击者可以在 Cribl 实例上运行恶意代码，从而获得进一步的控制权。 下面是一个此类示例：利用脚本页面和长期有效的 JWT...

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

CVE-2026-45048

OpenAM Community Edition (through version 16.0.6) is affected by an insufficient authorization (CWE-285) and information exposure (CWE-200) flaw in the SessionRequestHandler within the session management endpoint. In deployments using stateful session storage , a low-privileged authenticated user...

CVE-2025-65640

CVE-2025-65640 1. 漏洞信息 CVE ID: CVE-2025-65640（目前为保留状态） 漏洞类型: 存储型跨站脚本（XSS） CVSSv3 评分: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N 厂商: Arket/Bluenext S.r.l. 产品: Globe Document Intelligence 受影响版本: 5.0.0.559 发现者: Vincenzo Emanuele Martone 2. 描述 在 Globe Document Intelligence 平台（版本...

CVE-2025-69848-security-advisories

NetBox ProtectedError 处理中的反射型 XSS（CVE-2025-69848） 概述 NetBox 是一个开源的基础设施资源建模和 IP 地址管理平台。在 ProtectedError 异常处理逻辑中存在一个反射型跨站脚本（XSS）漏洞。 当删除操作因受保护关系而失败时，对象显示名称会被插入到 HTML 错误消息中，而未经正确转义。这使得用户可控内容能够在 NetBox Web 界面中被渲染。 影响 能够控制对象名称的攻击者可导致任意客户端代码在查看错误消息的特权用户浏览器中执行。这可能导致 NetBox 界面内发生会话劫持、权限提升或未授权操作。 受影响版本...

EUVD-2026-78210

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to...

EUVD-2026-78169

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in the instance origin when clicked,...

CVE-2026-91146

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in the instance origin when clicked,...

CVE-2026-36392

CVE-2026-36392：RISE CRM 项目标题字段中的存储型 XSS 摘要 RISE CRM（RISE - Ultimate Project Manager & CRM）版本 = 3.9.6 的项目标题字段中存在存储型跨站脚本（XSS）漏洞。经过身份验证的管理员可以向项目标题中注入任意 JavaScript，该脚本会存储在服务器端，并在任何客户端用户访问商店页面时于其浏览器中执行，从而可能导致会话劫持、账户接管和网络钓鱼。 详细信息 字段| 值 ---|--- CVE ID| CVE-2026-36392 产品| RISE - Ultimate Project Manager ...

CVE-2026-91146

Takahe versions through 0.11.0 fail to restrict URL schemes in link hrefs within federated post content and profile summaries. This allows remote attackers to inject javascript: links that execute in the instance origin when a user clicks them, enabling session hijacking or impersonation of viewe...

CVE-2026-91146 Takahe through 0.11.0 Cross-Site Scripting via javascript: URL Scheme

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in the instance origin when clicked,...

CVE-2026-91146 Takahe through 0.11.0 Cross-Site Scripting via javascript: URL Scheme

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in the instance origin when clicked,...