CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Vulnerabilidad XSS en la implementación de document root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new...

CVE-2021-32644

CVE-2021-32644 This vulnerability is an XSS vulnerability that affected versions prior to Ampache 4.4.3. https://nvd.nist.gov/vuln/detail/CVE-2021-32644 Installation and Execution Steps 1. Install Ampache When installing, please configure port forwarding in the docker-compose.yml file. The...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

CVE-2021-20323

CVE-2021-20323 Escáner de explotación de vulnerabilidad Cross Site Scripting en Keycloak...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Exploit Title: Rafed CMS Website v1.44 - Cross Site Scripting XSS Date: 2024-03-12 CVE: CVE-2024-55060 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.rafed-system.org/ Software Link: N/A Version: 1.44...

CVE-2020-9460

CVE-2020-9460 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 a 4.11 permiten XSS por parte de un usuario autenticado. El parámetro...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - Cross-site scripting XSS vulnerabilities in attendancereport Description : Cross Site Scripting vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the "page...

CVE-2024-34312

CVE-2024-34312 Descripción Se descubrió que Virtual Programming Lab para Moodle hasta v4.2.3 contiene una vulnerabilidad de Cross-Site Scripting XSS a través de su componente IDE. Detalles adicionales El navegador se conecta directamente a un websocket que se ejecuta en el servidor jail. A través...

CVE-2026-64638-WordPress-Core-XSS2Shell

CVE-2026-64638 — Nuclei Detection Template Template Nuclei for non-intrusive detection of XSS2Shell , a pre-authenticated differential parser in WordPress Core that allows injection of DOM elements into the login page, serving as the basis for an XSS → RCE chain. ⚠️ This template only detects the...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/class" Description : A cross-site scripting XSS vulnerability in the component "/management/class" of School Fees Management System v1.0 allows attackers to execute...

CVE-2023-4771

CKEditor cross-site scripting vulnerability in AJAX sample CVE-2023-4771 PoC CKEditor 4 Cross-site scripting XSS vulnerability in AJAX sample This document describes how to perform an XSS vulnerability CVE-2023-4771 using CKEditor. Make sure the following is done with great caution to follow...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

CVE-2024-39248

Título del Exploit: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Autor del Exploit: Jason Jacobs 0xjasonjacobs - Twitter Página del proveedor: https://sourceforge.net/projects/simpcms/ Endpoint vulnerable: /SimpCMS/admin.php Una vulnerabilidad de cross-site scripting XSS en SimpCMS...

CVE-2024-46278-teedy_1.11_account-takeover

【CVE-2024-46278】teedy1.11account-takeover 【Teedy 1.11】toma de control de cuenta mediante XSS Detalle Existe una vulnerabilidad que provoca XSS al descargar archivos. La vulnerabilidad XSS podría permitir que un administrador de Teedy robe una cuenta con unos pocos clics. Esta vulnerabilidad está...

CVE-2024-25292

RenderTune RCE CVE-2024-25292 漏洞的概念验证。 RenderTune v1.1.4 中存在跨站脚本 XSS 漏洞，攻击者可通过向“上传标题”参数注入精心构造的有效载荷来执行任意 Web 脚本或 HTML。 本仓库包含一个示例的易受攻击应用程序及其概念验证 PoC 漏洞利用程序。 作为 PoC，提供了一个自动完成该过程的 Python 文件。 1. 漏洞概述： 这是一个通过 XSS 实现 RCE 的漏洞。 标题中存在一个可执行 XSS 的部分，因此该漏洞能够通过 XSS 语法利用 NodeJS 语法实现 RCE。 2. 漏洞成因： nteract 0.28.0...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

XSS2Shell-CVE-2026-64638

This repository does not have a README...

CVE-2022-33075

CVE-2022-33075 Título del Exploit: Zoo Management System 1.0 - Cross-Site-Scripting Almacenado XSS Fecha: 26/05/2022 Autor del Exploit: Angelo Pio Amirante Página del Proveedor: https://www.sourcecodester.com/ Enlace del Software:...

CVE-2024-4367-PoC

CVE-2024-4367-PoC This Proof of Concept PoC demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting XSS attacks. Features This PoC collects and displays the following types of information: 1. General Information: Domain Title Current URL Referrer URL...