EUVD-2026-91749

ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed through schema attribute validation. Whe...

CVE-2026-104847

The prosemirror-view component in ProseMirror (prior to version 1.42.3 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue arises because the paste handling mechanism accepts attacker-provided HTML where clipboard slice context attributes bypass schema attribute validation . An attack...

CVE-2026-104847 ProseMirror: XSS vulnerability in prosemirror-view's paste handling

ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed through schema attribute validation. Whe...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Реверс-шелл...

CVE-2026-104459

Versions of YesWiki prior to 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) in the WebfingerService component. Unauthenticated attackers can exploit this by sending a POST request containing a crafted actor_handle with a numeric host and port to the abonnements view. This allows the...

EUVD-2026-91470

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Attackers can POST a crafted actorhandle with a numeric host and port to the abonnements view to probe internal HTTPS...

pe_tree

PE Tree PE Tree est un module Python permettant d'afficher les fichier Portable Executable PE dans une arborescence à l'aide de pefile et PyQt5. Il peut également être utilisé avec IDA Pro, Ghidra, Volatility, Rekall et minidump pour visualiser et extraire des fichiers PE en mémoire, ainsi que po...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Versions concernées VMware View Planner Harness 4.X Similaire à CVE-2021-21978, cette vulnérabilité permet de télécharger des fichiers arbitraires sans authentification et d'exécuter du code à distance en modifiant le script py intégré. Il est à noter que...

ketello: Katello Content View History API Cross-Organization Authorization Bypass

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...

ketello: Katello Content View History API Cross-Organization Authorization Bypass

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...

ketello: Katello Content View History API Cross-Organization Authorization Bypass

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Compte-rendu de la vulnérabilité Moniker Link Ce dépôt contient un compte-rendu technique de CVE-2024-21413 , une vulnérabilité liée à la gestion des liens Moniker dans Microsoft Outlook qui permet aux attaquants de contourner la vue protégée et de divulguer des identifiants NTLM...

CVE-2026-21514_CVE-2026-21510

CVE-2026-21514 и CVE-2026-21510 Builders 1; CVE-2026-21514 Обход SBX или обход Protected View Пересобрать пакет документа с запутанным путём к WindowsUpdateDiagnostic.xml внутри word/rels/webSettings.xml.rels В ожидании Проверить другие xml-конфигурации в пути C:\Windows\diagnostics\index на...

CVE-2026-23498

CVE-2026-23498: Shopware имеет некорректный контроль генерации кода в представлениях, отображаемых Twig Обзор Поле| Сведения ---|--- Идентификатор CVE| CVE-2026-23498 Серьёзность| Высокая Консультация| Просмотреть консультацию Обнаружил| Lukasz Rybak Затронутые продукты shopware/shopware версии: ...

CVE-2021-44228

CVE-2021-44228 Обнаружение бэкдора для VMware View Horizon Включает канареечную проверку canary с опциональной отправкой. Очевидно, используйте на свой страх и риск, и так далее. Предназначен для запуска на серверах подключения Windows VMware Horizon. Он не проверяет устройства UAG они работают н...

djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)

ImpactFor views that opt into state snapshots, the snapshot statejson embedded in the client page was restored on reconnect as trusted view state with no integrity check. A client could edit the unsigned statejson in their page and return it in the reconnect mount frame to inject arbitrary view...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 워크스루 TryHackMe의 "Moniker Link" 룸 전체 워크스루: 2024년 Microsoft Outlook 취약점인 CVE-2024-21413을 무기화하여, 피해자가 피싱 이메일의 링크를 클릭하는 순간 NTLMv2 해시를 탈취하는 방법입니다. 매크로도, 첨부 파일도, 눈에 띄는 보안 경고도 없이 말이죠. CVE-2024-21413"Moniker Link"은 Outlook이 Windows OLE "moniker" 구문경로 뒤의 !, 예:...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Уязвимость Moniker Link в Microsoft Outlook Обзор В этом репозитории представлен мой практический анализ CVE-2024-21413 Moniker Link — критической уязвимости Microsoft Outlook, которая обходит защищённый просмотр Protected View и приводит к утечке учётных данных Windows NetNTLMv2...

ketello: Katello Content View History API Cross-Organization Authorization Bypass

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...

CVE-2025-26244

CVE-2025-26244-POC Код для эксплуатации этой уязвимости можно увидеть в 'spoof.go'. Он имитирует агента для C2-сервера. Чтобы запустить эту уязвимость, нам необходимо знать: 1. IP-адрес и порт слушателя. 2. Открытый ключ слушателя. 3. URL первого подключения слушателя. Эту информацию можно получи...