cve-2016-1764

CVE-2016-1764 漏洞利用 PoC 代码 无需破解加密即可恢复明文 iMessage 数据 作者 Shubham Shah 来自 Bishop Fox Joe DeMesy 来自 Bishop Fox Matthew Bryant CVE-2016-1764 供应商： Apple 发布日期： 2016年4月8日 补丁日期： 2016年3月21日 受影响系统： OS X Mountain Yosemite、El Capitan 上的 Messages 尽管近期围绕 Apple...

CVE-2020-28502

CVE-2020-28502 node-XMLHttpRequest RCE NVD 描述 这影响包 xmlhttprequest 1.7.0 之前的所有版本；以及包 xmlhttprequest-ssl 的所有版本。当请求同步发送时（即 xhr.open 中的 async=False），恶意用户输入流入 xhr.send 可能导致任意代码被注入并执行。 演示 设置 1. 从 Dockerfile 构建镜像 root@kitploit: $ docker build -t cve-2020-28502 . 2. 在新容器中运行 node app.js root@kitploit: $...

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Vulnerabilidad XSS en la implementación de document root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new...

toxssin

toxssin 用途 toxssin 是一款开源渗透测试工具，用于自动化利用跨站脚本（XSS）漏洞的过程。它包含一个 HTTPS 服务器，该服务器作为恶意 JavaScript 载荷（toxin.js）所产生流量的解释器。 该项目最初（现在仍然是）一项基于研究的创意尝试，旨在探索 XSS 漏洞可能带来的利用深度，仅使用原生 JavaScript、受信任的证书和一些廉价技巧。 免责声明 ：在未经明确许可的情况下，使用本工具针对 Web 应用进行测试是违法的。您应对使用本工具可能引起的任何麻烦负责。 视频演示 https://www.youtube.com/watch?v=Z9I4UJUBr...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite 扩展 该扩展为BurpSuite添加了一个上下文菜单，允许您将多个请求复制为JavaScript的XmlHttpRequest，从而简化了利用XSS时的PoC开发。 安装 从发行版下载最新的JAR或手动构建 通过标签页将JAR添加到BurpSuite：'扩展器' - '扩展' - '添加' 用法 从任何标签页中选择一个请求，或从'代理' - 'HTTP历史记录'标签页中选择多个请求 调用上下文菜单并选择'复制为XMLHttpRequest'...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

CVE-2017-5638

CVE-2017-5638 CVE: 2017-5638 en diferentes formatos La mayoría de ellos te requerirán ingresar la URL y es posible que quieras cambiar el comando Por favor, envía pull requests si puedes hacerlo de manera que puedas ingresar una URL y un comando PHP - Ejemplo...

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

CLSA-2026-1785204344 TuxCare security update for xmlhttprequest-ssl (11 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 11 CVEs. Fixed in 1.5.1-tuxcare.1...

CLSA-2026-1777336760 TuxCare security update for xmlhttprequest (9 CVEs)

TuxCare rebuilt xmlhttprequest to address 9 CVEs. Fixed in 1.4.2-tuxcare.1...

CLSA-2026-1772064638 TuxCare security update for xmlhttprequest-ssl (3 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 3 CVEs. Fixed in 1.5.5-tuxcare.1...

PYSEC-2026-1997 urllib3 does not control redirects in browsers and Node.js

urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means you can use Python libraries to make HTTP requests from your browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects. However, the retries...

Astra Linux – Vulnerability in Firefox and Thunderbird

Cross-Site Tracing occurs when a server echoes a request back using the Trace method, allowing an XSS attack to access authorization headers and cookies that are inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitigate this attack, browsers imposed restrictions on fetch and...

MITM (Man-in-the-Middle) xmlhttprequest Dependency in Jira Service Management Data Center

This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity MITM Man-in-the-Middle vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service...

PT-2026-5151

Name of the Vulnerable Software and Affected Versions ILIAS Learning Management System version 4.3 Description The ILIAS Learning Management System contains a server-side request forgery issue. This allows attackers to read local files through the portfolio PDF export functionality. Attackers can...

MiracleLinux 7 : firefox-60.7.0-1.0.1.el7.AXS7 (AXSA:2019-3895:02)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3895:02 advisory. Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 CVE-2019-9800 Mozilla: Cross-origin theft of images with createImageBitmap...

Mozilla Thunderbird < 3.0.7

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and...

Mozilla Firefox < 3.6.9

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.6.9. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey...

Mozilla Firefox < 3.6.9

The version of Firefox installed on the remote Windows host is prior to 3.6.9. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0...

Mozilla Firefox < 3.5.12

The version of Firefox installed on the remote Windows host is prior to 3.5.12. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before...