-CVE-2022-48150

-CVE-2022-48150 I Found the reflected xss vulnerability in shopware 5 .for more details check my poc video...

CVE-2024-24134

CVE-2024-24134 : Online Food Menu - Cross-Site-Scripting Proof of ConceptPoc : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24134.md Proof of ConceptPoc : https://github.com/BurakSevben/CVE-2024-24134/blob/main/CVE-2024-24134.md...

cve-2020-11023-scanner

💥 CVE-2020-11023 Scanner: Find and Conquer XSS Before It's Too Late! 💥 Are you haunted by the specter of Cross-Site Scripting XSS vulnerabilities lurking in your JavaScript code? Worried about CVE-2020-11023 leaving your web applications open to attack? Fear no more! The CVE-2020-11023 Scanner is...

xss_vulnerability_challenges

Escenarios de Vulnerabilidad XSS desafíos Este repositorio es una aplicación PHP Dockerizada que contiene algunos desafíos de vulnerabilidad XSS. Las ideas detrás de los desafíos son: Bypass de validación de JavaScript Bypass de entidades HTML Bypass de WAF Bypass de validación de lista negra...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Vulnearability Report of the New Jersey official site Potential XSS vulnerability in jQuery.htmlPrefilter and related methods. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others...

CVE-2017-18635

cve-2017-18635 PoC for CVE-2017-18635 Full article: Exploiting an old noVNC XSS CVE-2017-18635 in OpenStack...

CVE-2024-22890

CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22890/blob/main/CVE-2024-22890.md...

jquery-cve-2022-31160

jQuery UI CVE-2022-31160 Vulnerability Demonstration This project demonstrates the jQuery UI Checkboxradio Widget Refresh Vulnerability CVE-2022-31160 , which allows HTML entity decoding during widget refresh operations, potentially leading to Cross-Site Scripting XSS attacks. 🚨 Security Warning ...

PoC-CVE-2024-24035

CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...

CVE-2020-13965

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail A Cross-Site scripting XSS vulnerability exists in Roundcube versions before 1.4.5 and 1.3.12. By leveraging the parsing of "text/xml" attachment, an attacker can bypass the Roundcube script filter and execute...

CVE-2023-30943

CVE-2023-30943Moodle self-xss 免責事項 本コンテンツは、明示または黙示を問わず、いかなる保証もなく「現状のまま」提供されます。 著者は、本リポジトリに関連する情報やソフトウェアの使用に起因する直接的または間接的な損害について、一切の責任を負いません。 ソースコードを含むすべての資料は、情報提供のみを目的として提供されています。本リポジトリのコードの使用は、自己の責任において行ってください。...

toxssin

toxssin Назначение toxssin — это инструмент тестирования на проникновение с открытым исходным кодом, который автоматизирует процесс эксплуатации уязвимостей межсайтового скриптинга XSS. Он состоит из HTTPS-сервера, который работает как интерпретатор трафика, генерируемого вредоносной...

CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...

CVE-2024-51026_Overview

CVE-2024-51026 - Cross Site Scripting XSS Vulnerability in NetAdmin IAM Description The NetAdmin IAM system version 4.0.30319 presents a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload in the Content= field. Any...

CVE-2022-31299

CVE-2022-31299 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31299 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user. Reffer to: https://github.com/G37SYS73M/AdvisoryG37SYS73M/blob/main/CVE-2022-46087/poc.md...