pax

pax パディングオラクルを悪用して、楽しみながら利益を得よう！ Pax（Padding oracle eXploiter）は、パディングオラクルを悪用するためのツールです。以下の目的で使用します。 1. 与えられたCBC暗号化データの平文を取得します。 2. 与えられた平文に対して、オラクルが使用する未知の暗号化アルゴリズムを用いて暗号化されたバイトを取得します。 これにより、暗号化されたセッション情報を開示したり、認証を回避したり、権限を昇格させたり、カスタム平文を暗号化してサーバーに書き戻すことでリモートコード実行を行うことができます。...

CVE-2023-44812

CVE-2023-44812 Una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro adminredirecturl de la función de inicio de sesión de usuario de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión del administrador y suplantar su cuenta mediante una URL manipulada...

CVE-2026-101891

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-101891

An improper access control vulnerability exists in an internal API service on WatchGuard Access Points . This flaw allows an unauthenticated attacker with network access to the access point to obtain a valid API session . No specific exploit details or remediation steps are provided in the docume...

CVE-2023-25292

CVE-2023-25292 Intermesh BV Group-Office 版本 6.6.145 中存在反射型跨站脚本（XSS）漏洞，允许攻击者通过 GOLANGUAGE Cookie 提升权限并获取敏感信息 漏洞详情 产品：Group Office Application 版本：6.6.145 漏洞类型：反射型 XSS 严重性：中危 CVSS v3.1 评分：6.1（AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N） 漏洞描述 该应用程序容易受到通过“GOLANGUAGE”Cookie 进行的反射型 XSS 攻击，该 Cookie 会将恶意的...

CVE-2025-60374

CVE-2025-60374 CVE-2025-60374：Perfex CRM 聊天机器人中的存储型跨站脚本（XSS）漏洞 ⚠️ 安全公告 Perfex CRM 的聊天机器人功能中存在一个严重的存储型跨站脚本漏洞 📋 概述 Perfex CRM 3.3.1 之前的版本中，聊天机器人组件存在一个存储型跨站脚本（XSS）漏洞，允许攻击者通过聊天消息注入任意 JavaScript 代码。恶意载荷存储在应用程序数据库中，并在查看聊天会话的用户浏览器中执行，从而实现会话令牌窃取、以受害者身份执行未授权操作以及其他客户端攻击。 🎯 受影响版本 产品： Perfex CRM 供应商： Perfex...

GHSA-PGWP-VC7Q-CVJ3 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Summary A stored cross-site scripting XSS vulnerability in phpMyFAQ allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeove...

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Summary A stored cross-site scripting XSS vulnerability in phpMyFAQ allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeove...

Cross-site Scripting (XSS)

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Cross-site Scripting XSS via the htmlentitydecode process. An attacker can execute arbitrary JavaScript in an administrator's browser by submitting...

Cross-site Scripting (XSS)

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Cross-site Scripting XSS via the htmlentitydecode process. An attacker can execute arbitrary JavaScript in an administrator's browser by submitting...

CVE-2026-56736

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

EUVD-2026-86010

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736

The open-source FAQ web application phpMyFAQ is vulnerable to a stored cross-site scripting (XSS) flaw in versions prior to 4.2.0-alpha . The root cause is an HTML entity bypass where the html_entity_decode() function converts entities into executable HTML after strip_tags() has already processed...

CVE-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56736: Improper Neutralization of Input During Web Page Generation

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

PT-2026-97827

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.2.0-alpha Description A stored cross-site scripting XSS issue exists that allows unauthenticated users or low-privileged registered users to inject arbitrary JavaScript. The attack occurs when an administrator...

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...