116293 matches found
CVE-2020-13942
CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...
CVE-2025-41088
CVE-2025-41088: Stored XSS in Xibo CMS I have discovered a Stored Cross-Site Scripting XSS vulnerability in Xibo CMS v4.1.2. This vulnerability allows an authenticated attacker to inject malicious scripts into the application due to improper validation of user-supplied input. The issue resides in...
CVE-2019-0232
CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...
Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46072 Exploit Title: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25
Script Security Plugin User’s guide adapted from information on Template plugin in CloudBees Plugins guide Various Jenkins plugins require that users define custom scripts, most commonly in the Groovy language, to customize Jenkins’s behavior. If everyone who writes these scripts is a Jenkins...
CVE-2019-14287
🖥️ - This script was developed by h3x0v3rl0rd. script to check for CVE-2019-14287...
CVE-2024-6387
CVE-2024-6387 Installation and Execution of the Script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...
CVE-2026-82387
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...
CVE-2025-56762
Description: The application leverages “error.php” to serve the respective error code as per the use case back to the web application upon encountering an error. Upon inspecting the source code, it was found that the application does not sanitize the parameter “code” when crafting a malicious...
CVE-2026-82381
Apache Roller version 6.1.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. An attacker with authoring rights on a weblog can store crafted content that is injected into the authoring UI's JavaScript string literals and...
exp
exp Batch scanning script for CVE-2023-35854 Usage: python3 piliang.py -r D:\1.txt...
CVE-2012-2982_Python
CVE-2012-2982Python PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting This is the metasploit CVE: https://www.exploit-db.com/exploits/21851 Those are the changes done after the discovery of the Exploit:...
CVE-2021-46068
CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...
Oracle-Identity-Manager-CVE-2025-61757
Oracle Identity Manager CVE-2025-61757 Vulnerability Detection Tool v2.2 🔥 Vulnerability Background Recently, Oracle Identity Manager was exposed to a severe remote code execution vulnerability CVE-2025-61757. Due to improper handling of request URIs in the SecurityFilter, attackers can bypass...
Ghost-CMS-Code-Injection-Audit-CVE-2026-26980
Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...
nmap-nse-scripts
Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...
TypeHub-Exploiter
TypeHub Exploiter This script exploits a vulnerability CVE-2021-25094 in the TypeHub WordPress plugin...
CVE-2026-84645
A flaw was found in Jenkins. This vulnerability allows a remote attacker to achieve remote code execution. By manipulating user-submitted configuration files, an attacker can exploit a deserialization weakness where specially crafted objects can process HTTP requests. This grants unauthorized...
CVE-2021-22893
CVE-2021-22893 Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...