1048151 matches found
CVE-2021-32160
..| XSS para usuário privilegiado |.. Descrição : Explorando um ataque de Cross-Site Scripting XSS refletido para criar um usuário privilegiado por meio do recurso de adição de usuários do Webmin e, em seguida, obtendo um shell reverso por meio do recurso de processos em execução do Webmin Versão...
poc-cve-xss-inventory-press-plugin
Aggiornamento - 23/06/2023 L'ID CVE-2023-2579 è stato riservato e il PoC è stato pubblicato sul sito WPScan: https://wpscan.com/vulnerability/3cfcb8cc-9c4f-409c-934f-9f3f043de6fe Dettagli Titolo: Cross-Site Scripting Riflesso Autenticato nel Plugin InventoryPress per WordPress CMS Data: 2023-04-2...
CVE-2016-3113
CVE-2016-3113 PoC Una proof of concept per sfruttare la vulnerabilità XSS riflessa nell'interfaccia web di oVirt RedHat. In questo PoC, una VM nell'ambiente IaaS oVirt deve essere avviata tramite la sessione del browser della vittima. Il codice JS è stato mantenuto semplice a causa della fretta...
CVE-2023-41425
Wonder CMS RCE | | Descrizione: XSS a RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF Starting a new web server to serve payloads...
EUVD-2026-68106
Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451 Formwork through 2.3.14 Stored XSS via Referer Header
Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel...
CVE-2026-82451
Formwork (through version 2.3.14) contains a stored cross-site scripting (XSS) vulnerability in its visit tracking functionality. The root cause is that the Referer header host is recorded unescaped in the statistics data. An unauthenticated attacker can craft a malicious Referer header, which is...
CVE-2020-13094
Dolibarr 11.0.3 - Persistentes Cross-Site-Scripting Autor: Mehmet Kelepce / Gais Cyber Security Datum: 2020-04-14 Anbieter: https://www.dolibarr.org/ Exploit-DB Autor-ID: 8763 Aus der Ferne ausnutzbar: Ja Dynamische Codierungssprache: PHP CVSSv3 Basis-Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L,...
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI معرض لـ DOM XSS المخزنة عبر المطالبات عند تمكين 'إدراج المطالبة كنص منسق' مما يؤدي إلى ATO/RCE الملخص الوظيفة التي تُدرج المطالبات المخصصة في نافذة المحادثة معرضة لـ DOM XSS عند تمكين 'إدراج المطالبة كنص منسق'، حيث يتم تعيين نص المطالبة إلى موصل DOM .innerHtml دون...
CVE-2021-32161
..| XSStoCommandInjection2 |.. Descrizione : Sfruttare un attacco di Cross-Site Scripting XSS riflesso per ottenere un Command Injection tramite la funzione File Manager di Webmin Versione testata : Webmin 1.973 ultima versione su GitHub 07/03/2021 Tipo di attacco: Remoto Impatto : Esecuzione di...
CVE-2021-46068
CVE-2021-46068 Titolo dell'Exploit: Vehicle Service Management System - 'MyAccount' Cross Site Scripting Memorizzato XSS Autore dell'Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Riferimenti: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xs...
CVE-2021-46073
CVE-2021-46073 Titolo Exploit: Vehicle Service Management System - 'User List' Cross Site Scripting XSS persistente Autore Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...
CVE-2021-46078
CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Mehrere' Datei-Uploads führen zu Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Referenzen:...
CVE-2021-46072
CVE-2021-46072 Titolo Exploit: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...
CVE-2025-3568
CVE-2025-3568 Escalation dei privilegi tramite file SVG malintenzionato Riepilogo È stata identificata una vulnerabilità di sicurezza in Krayin CRM 2.1.0 che consente a un utente con privilegi bassi di escalare i propri privilegi ingannando un amministratore affinché apra un file SVG...
CVE-2023-30212
CVE-2023-30212 CONFIGURAZIONE LAB Prerequisito Scarica docker.io sudo apt install -y docker.io PASSI 1. Scarica tutti i file dal mio repository usando il comando seguente. git clone https://github.com/AAsh035/CVE-2023-30212.git 2. Ora per creare un'immagine docker esegui il seguente comando: sudo...
CVE-2022-38374
CVE-2022-38374 Testo copiato da :https://vulners.com/cve/CVE-2022-38374...
CVE-2026-37196
CVE-2026-37196 – Cross-Site Scripting XSS Memorizzato in nirix traq v3.9.0 Panoramica Esiste una vulnerabilità di Cross-Site Scripting XSS Memorizzato in nirix traq v3.9.0 , in cui l'input fornito dall'utente nel campo di descrizione del ticket non viene sanificato correttamente prima di essere...