1131050 matches found
YouGile Project Management XSS
The vulnerability of the YouGile project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
xss-cheatsheet-data
This is the data that powers the PortSwigger XSS cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests. Contributing To contribute please create a pull request with changes to the JSON data. For example, to add onwaiting to the data, do: "onwaiting...
ezXSS
ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...
thingsboard
All-in-one IoT platform for data collection, processing, visualization, and device management. π‘ Get started β’ π Website β’ π Documentation β’ π Blog β’ π LinkedIn π Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. π‘ Getting started with ThingsBoard Check out our Gettin...
CVE-2026-114404 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...
CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo
Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...
CVE-2024-11252-Sassy-Social-Share-XSS
CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability Description This project demonstrates a reflected Cross-Site Scripting XSS vulnerability found in the Sassy Social Share plugin for WordPress. This vulnerability can be exploited via the heateormastodonshare parameter. Usage 1. PoC.html :...
Pybelt
NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...
XSS-PoCs
XSS-PoCs Cross-Site Scripting Proof of Concepts...
JShell
JShell JShell - Get a JavaScript shell with XSS. Usages Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33. As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim. As soon as you do that, you wil...
BurpSuite-For-Pentester
π·οΈ BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...
CVE-2026-114407 e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
Tiny-XSS-Payloads
Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. The DEMO available here: https://tinyxss.terjanq.me Current Payloads ... -- " !-- If number of iframes on the pa...
HackTools
Welcome to HackTools ! Introduction β Preview β Install β Build β Support !NOTE Psst... Loved HackTools? π Check out Penflow - our new security testing companion! Try it at map.penflow.sh π !NOTE Dear Users, We're excited to announce a major revamp of our app! Due to recent changes and multiple...
htmlpurifier
HTML Purifier HTML Purifier is an HTML filtering solution that uses a unique combination of robust whitelists and aggressive parsing to ensure that not only are XSS attacks thwarted, but the resulting HTML is standards compliant. HTML Purifier is oriented towards richly formatted documents from...