Lucene search
+L

1049727 matches found

Kitploit
Kitploit
added 2026/09/10 11:55 a.m.50 views

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 11:50 a.m.6 views

CVE-2022-42096

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Post content. Attack Vectors: The attacker must post something on the "Post content" and insert the XSS payload at the "Body" input,...

4.8CVSS5.7AI score0.02016EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 11:49 a.m.5 views

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details...

5.3CVSS5.6AI score0.00388EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:47 a.m.7 views

cpanel-xss-177

xss - cpanelCVE-2023-29489 cPanel versions 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 are vulnerable to Reflected Cross-Site Scripting via a specially crafted request to the web call ID when displayed on the error page for cpsrvd. How t...

6.1CVSS6.7AI score0.65533EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/10 11:44 a.m.6 views

https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

6.1CVSS7AI score0.04135EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 11:38 a.m.32 views

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 11:29 a.m.4 views

Appsmith-1.98-Stored-XSS-Exploit

CVE-2026-7299 - Appsmith 1.98 Stored XSS SQL Autocomplete innerHTML Sink Automated exploit for a stored cross-site scripting vulnerability in Appsmith's SQL query editor. A workspace Developer can inject arbitrary JavaScript via database table names that execute in any other workspace member's...

6.3CVSS5.9AI score0.00341EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 11:26 a.m.65 views

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

5.5AI score
SaveExploits0References2
Patchstack
Patchstack
added 2026/09/10 11:21 a.m.3 views

WordPress Sidebar Manager Light plugin <= 1.18 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Nabil Irawan in WordPress Plugin Sidebar Manager Light versions = 1.18...

7.2CVSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/10 11:19 a.m.13 views

rawsec-cybersecurity-inventory

Rawsec's Cybersecurity Inventory Name| Link ---|--- Website| link Documentation| link Git repository| link Git repository mirror| link Merge Requests| link Issues| link Wiki| link Chat| link For contribution, development, usage or questions check the documentation. Sponsors Please contact me or...

6AI score
SaveExploits0References22
Patchstack
Patchstack
added 2026/09/10 11:19 a.m.3 views

WordPress Redux Framework plugin <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by h0xilo in WordPress Plugin Redux Framework versions = 4.5.13.1...

6.4CVSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/10 11:18 a.m.7 views

JShell

JShell JShell - Get a JavaScript shell with XSS. Usages Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33. As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim. As soon as you do that, you wil...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:15 a.m.6 views

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

9.8CVSS8.1AI score0.1981EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/10 11:10 a.m.7 views

CVE-2025-63307

CVE-2025-63307 – Authenticated Stored Cross-site Scripting XSS in laravel-file-manager v3.3.1 🧭 Overview An authenticated Stored Cross-site Scripting XSS vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitra...

8.1CVSS5.9AI score0.00369EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 11:01 a.m.105 views

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

5.4AI score
SaveExploits0References33
Kitploit
Kitploit
added 2026/09/10 10:47 a.m.144 views

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 10:46 a.m.7 views

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

6.1CVSS5.8AI score0.00314EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 10:41 a.m.6 views

CVE-2021-40223

CVE-2021-40223 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Stored XSS Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input on Security...

5.4CVSS6AI score0.00624EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 10:39 a.m.5 views

Tiny-XSS-Payloads

Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. The DEMO available here: https://tinyxss.terjanq.me Current Payloads root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:33 a.m.9 views

CVE-2024-7313

Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...

6.1CVSS5.9AI score0.01551EPSS
SaveExploits3
Rows per page
Query Builder