1126676 matches found
CVE-2022-29380
CVE-2022-29380 CVE-2022-29380 root@kitploit: Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References...
CVE-2017-0055-PoC
CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING Referencia: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Puntuación base: 6.1 Gravedad: Media Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...
Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS
CVE-2021-46070 Título del Exploit: Vehicle Service Management System - 'Service Requests' Cross Site Scripting XSS almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Referencias:...
CVE-2023-32961
CVE-2023-32961 Este repositorio trata sobre una vulnerabilidad de XSS en el plugin Zotpress de WordPress. Detalles del componente Nombre del componente Zotpress Versión vulnerable ≤ 7.3.3 Slug del componente zotpress Enlace del componente https://wordpress.org/plugins/zotpress/ Requisito previo S...
CVE-2023-29439
CVE-2023-29439 This repository is about XSS vulnerability in Wordpress Foogallery Plugin. Vulenerability details Description In Foogallery 2.2.35 and earlier, the function foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php is vulnerable to XSS attack...
CVE-2024-40509
CVE-2024-40509 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 mediante la función serverMFinDev.asmx. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando una XSS en openPetra v.2023.02 mediante la función serverMFinDev.asmx. Versión del...
CVE-2024-40508
CVE-2024-40508 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMConference.asmx. Descripción : Un usuario no autenticado puede robar cookies de usuarios autenticados explotando un XSS en openPetra v.2023.02 a través de la función serverMConference.asmx...
CVE-2024-40506
CVE-2024-40506 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMHospitality.asmx function. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMHospitality.asmx. Versión...
CVE-2024-40510
CVE-2024-40510 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMCommon.asmx. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMCommon.asmx. Versión...
CVE-2024-21338-1
CVE-2024-21338 Este PoC fue desarrollado para el concurso XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...
Wordpress_xss-CVE-2022-29455
This repository does not have a README...
Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46073 Exploit Title: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...
EUVD-2026-80117
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to...
CVE-2026-19619
CVE-2026-19619 affects GitLab CE/EE versions 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. The vulnerability is a cross-site scripting (XSS) flaw caused by improper sanitization of pasted HTML content in the Content Editor . Under certain conditions, an unauthenticated attacker ...
CVE-2026-78252
GitLab CE/EE versions from 15.3 before 19.1.8 , 19.2 before 19.2.6 , and 19.3 before 19.3.2 are affected by improper sanitization of user-controlled data in the Markdown JSON table renderer . Under certain conditions, an authenticated user could induce a targeted user to perform unintended state-...
CVE-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...
CVE-2026-86444
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...
CVE-2023-0214
SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhi...