CVE-2020-8825

CVE-2020-8825 Pubblicazione: CVE-2020-8825 Fornitore: root@kitploit: PHP VanillaForum Descrizione: root@kitploit: La vulnerabilità esiste a causa di una sanitizzazione insufficiente dei dati forniti dall'utente passati all'URL "index.php?p=/dashboard/settings/branding". Un attaccante remoto può...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - XSS riflesso trovato in i-doit Open v24 e versioni precedenti i-doit Open v24 e versioni precedenti sono vulnerabili a una vulnerabilità di XSS riflesso. Queste vulnerabilità potrebbero consentire a utenti remoti autenticati di iniettare script web o HTML arbitrari. Descrizione d...

CVE-2025-68147-OSPOS-Stored-XSS

CVE-2025-68147: Stored Cross-Site Scripting XSS in OpenSourcePOS...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creare-un-Ambiente-Docker-Vulnerabile-CVE-2023-30212- Scarica i file dal mio repository usando git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git ora per impostare l'immagine docker Creazione dell'immagine docker usa il comando sudo docke...

CVE-2025-59424

CVE-2025-59424 LinkAce Stored Cross-Site Scripting XSS auf der Seite /system/audit...

CVE-2024-46538

Questo post è un articolo di ricerca pubblicato da EQSTLab. Grazie aphysicszq, che ha scoperto questa vulnerabilità. CVE-2024-46538 ★ CVE-2024-46538 PoC di XSS persistente in PfSense che porta all'esecuzione arbitraria di codice ★...

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Obiettivo:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Versione:V3.5.0 Nome della vulnerabilità:Vulnerabilità di Cross-Site Scripting XSS basata su DOM in novel V3.5.0 CWE-79 Tipo di vulnerabilità: Cross-Site Scripting basato su DOM DOM-based XSS Data di scoperta: 2025-11-...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting

A cross-site scripting vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ID parameter. id: CVE-2013-4117 info: name: WordPress Plugin Category Grid View Gallery 2.3.1 -...

WSO2 - Server Side Request Forgery

WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature accessible only to administrative users, caused by improper URL validation and direct content reflection, letting attackers trick admins into executing arbitrary JavaScript and querying internal services...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

AffiliateImporterEb <= 1.0.6 - Reflected XSS

AffiliateImporterEb WordPress plugin through 1.0.6 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12732 info: name: AffiliateImporterEb =...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit. Dettagli📃 CVE-2022-42889 colpisce le versioni di Apache Commons Text dalla 1.5 alla 1.9. È stata corretta a partire dalla versione 1.10 di Commons Text La vulnerabilità è stata paragonata a...

towaos-lab-cve-2020-11023

CVE-2020-11023 - Vulnerabilidade XSS no jQuery Payloads de ataque root@kitploit: alert1 root@kitploit: Medidas de mitigação ⚠️ Importante : o uso de .html não é totalmente evitado apenas com jQuery 1. Usar o método .text ⭐️Recomendado root@kitploit: // Seguro: não é interpretado como HTML...

Wormy

Wormy - La sfida In questo repo scriverò alcune funzioni in python3 nel mio tempo libero per aggiungere "funzionalità di diffusione simili a worm" a qualsiasi backdoor python. Dopo aver finito lo trasformerò in un vero worm Lista ToDo : 1Diffusione nei driver, aggiunta all'avvio e controllo...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 Cross-Site-Scripting XSS-Schwachstelle Beschreibung Cross-Site-Scripting XSS auf der Konfigurationsseite in SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 ermöglicht es einem authentifizierten...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Título do Exploit: Vehicle Service Management System - 'Service List' Cross-Site Scripting Armazenado XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-x...

CVE-2021-46071

CVE-2021-46071 Titolo Exploit: Vehicle Service Management System - 'Elenco Categorie' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2021-46068

CVE-2021-46068 Título do Exploit: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

EUVD-2026-67175

The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page. Spring for GraphQL 2.0.0 - 2.0.4 Spring...