CVE-2025-46657 PoC — Karaz Karazal 安全漏洞

Source

https://github.com/nov-1337/CVE-2025-46657

Associated Vulnerability

Title: Karaz Karazal 安全漏洞 (CVE-2025-46657)
Description:Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.

Readme

# NOV-CVE

Here is the CVE I’ve got: [CVE-2025-46657](https://github.com/nov-1337/CVE-2025-46657/blob/main/CVE-2025-46657.md)

Twitter: [nov_1337](https://x.com/nov_1337)

Telegram: [nov_1337](https://t.me/nov_1337)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →