CVE-2021-46079

CVE-2021-46079 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Exploit Author: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

domato

Domato 🍅 Un fuzzer de DOM Escrito y mantenido por Ivan Fratric, [email protected] Copyright 2017 Google Inc. Todos los derechos reservados. Licenciado bajo la Apache License, Versión 2.0 la "Licencia"; no puede utilizar este archivo excepto en cumplimiento de la Licencia. Puede obtener una...

CVE-2026-86273

CVE-2026-86273 affects projeto-siga siga up to 11.1.1 , specifically the HTML-to-PDF Endpoint component. The vulnerable function is DownloadExterno.getUrl in sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java. Manipulation of the html argument enables a server-side request forger...

CVE-2026-86273 projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery

A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF Endpoint. This manipulation of the argument html causes...

CVE-2026-51565

CVE-2026-51565 Security Advisory for CVE-2026-51565 Description Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request Mitigation At the time of...

CVE-2025-66849

CVE-2025-66849 Ghost CMS Privilege Escalation PoC Summary In Ghost Foundation Ghost CMS up to 6.4.0, the HTML block within the post draft editor fails to properly sanitize or encode user-supplied content, resulting in a stored cross-site scripting XSS vulnerability. A user with Contributor...

CSRF-via-stored-XSS-for-PrivEsc

Chamilo LMS addLabelgetlang'Thread', $threadEntity-getTitle; 2. /public/main/forum/viewforum.php - Line 369 root@kitploit: .$thread-getTitle.''; 3. There are more! Root Cause: Forum thread titles are stored without proper sanitization Thread titles are displayed without HTML escaping in multiple...

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...

leaflet-cve-2025-69993

CVE-2025-69993 — XSS in Leaflet bindPopup Cross-Site Scripting vulnerability in Leaflet = 1.9.4. The bindPopup method renders user-supplied input as raw HTML without sanitization, allowing arbitrary JavaScript execution. Repository Structure ADVISORY.md — Full security advisory with vulnerability...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...

ESXi-Ransomware-Scanner-mi

ESXiransomwarescanner A program that scans IP addresses for signs of ESXi compromise by grabbing the ransom note from an html page and comparing the strings. Requirements python 3.x requests BeautifulSoup tqdm colorama Installation Use the package manager pip to install the required packages...

CVE-2021-24884

CVE-2021-24884 XSS2RCE in Formidable 4.09.04 Formidable 4.09.04 allowed to inject certain HTML Tags like ,,, and . This could allow an unauthenticated, remote attacker to exploit a HTML-injection by injecting a malicous link. The HTML-injection may trick authenticated users to follow the link. If...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...

CVE-2023-47119

Table of contents CVE-2023-47119 Detailed analysis POC Escalation ? LAB Setup CVE-2023-47119 A POC for CVE-2023-47119 which is a vulnerability affecting Discourse versions prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches. Some links can...

HW-Pyton-10

CVE-2020-11022 Brief description CVE-2020-11022 is a Reflected XSS Cross-Site Scripting vulnerability related to incorrect processing of user input that is reflected in the HTML response without escaping. An attacker can inject JavaScript code that will execute in the user's browser...

CVE-2025-44136

CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to...

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

CVE-2026-84219

The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an administrator, and on...

EUVD-2026-72065

The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an administrator, and on...