Lucene search
+L

1126330 matches found

Kitploit
Kitploit
added 2026/09/12 6:24 a.m.9 views

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Commands: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usag...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:12 a.m.7 views

exploit-workshop

exploit-workshop En este taller paso a paso aprenderás cómo explotar varias vulnerabilidades del mundo real que existen en versiones vulnerables de paquetes en una aplicación Node.js y Java. Software necesario que debes instalar para este taller Puedes realizar este taller de 2 formas diferentes...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 5:55 a.m.5 views

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...

5.4CVSS6AI score0.01393EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 5:34 a.m.5 views

XSSYA

XSSYA-V2.0 has been Released - check https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods • Method number 1 for Confirmation Request and Response • Method number 2 for Confirmation Execute encoded payload and sear...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:33 a.m.7 views

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

6.8CVSS5.8AI score0.00334EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:31 a.m.5 views

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 A simple PoC to reproduce XSS vulnerability Steps npm i npm run start Go to localhost:3006...

6.1CVSS7AI score0.03426EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:41 a.m.4 views

XSS-Payloads

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:33 a.m.4 views

CVE-2019-10779

CVE-2019-10779 GCHQ Stroom is vulnerable to Cross-Site Scripting due to the ability to load the Stroom dashboard on another site and insufficient protection against window event origins...

6.1CVSS6.4AI score0.00906EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 4:32 a.m.8 views

tulpar

Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Tulpar has the following features. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory Traversal GET...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 4:22 a.m.389 views

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 4:11 a.m.7 views

CVE-2023-30212

CVE-2023-30212 Exploiting vulnerability in Ourphp version 7.2.0 also called CVE 2023 30212 Step 1. Download and install Docker in your system Note. I am using Docker because it’s quick and easy to install ubuntu. Step 2. Setup Docker environment root@kitploit: docker pull ubuntu docker run -d -t...

6.1CVSS6.5AI score0.08115EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 4:05 a.m.3 views

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:03 a.m.5 views

CVE-2022-29455

CVE-2022-29455 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Vulnerable Version = 3.5.5 versions Proof of Concept Exploit https://add your target...

6.1CVSS6.4AI score0.23678EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 4:02 a.m.5 views

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

5.9AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/12 3:17 a.m.7 views

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...

9.3CVSS7AI score0.5281EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 3:09 a.m.9 views

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 2:49 a.m.13 views

CVE-2025-51401

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Chat Name Field Triggers on Chat Owner Transfer Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage:...

5.4CVSS5.9AI score0.00892EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/12 2:49 a.m.6 views

Vulnerable-Docker--CVE-2023-30212-

Vulnerable-Docker-CVE-2023-30212- This contains the necessary directories and Dockerfile to replicate A vulnerabality in OURPHP that has a XSS Vulnerability CVE-2023-30212. Creating a Vulnerable Docker Environment CVE-2023-30212 PRE-REQUISITS Download Docker sudo apt install -y docker.io Follow...

6.1CVSS6.4AI score0.08115EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 2:37 a.m.11 views

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...

6.1CVSS5.9AI score0.00483EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:35 a.m.10 views

CVE-2019-12538

CVE-2019-12538 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SiteLookup.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do qcsiteID parameter. Author: Concobe of Tarantula Team - VinCSS a member of Vingro...

6.1CVSS6.4AI score0.06029EPSS
SaveExploits5
Rows per page
Query Builder