1049529 matches found
CVE-2023-43873-e107-CMS-Stored-XSS---Manage
e107 CMS Stored XSS v2.3.2 Author: Sergio Description: Cross Site Scripting XSS vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu. Attack Vectors: Scripting A vulnerability in the sanitization of the entry...
Reflected-XSS-in-Vvveb-CMS-v1.0.7.2
Reflected XSS in Login Form Email & Password Fields Vvveb CMS v1.0.7.2 Author: Andrew Paul Date of Discovery: August 12th, 2025 Vendor: Vvveb Vendor URL: http://vvveb.com Vendor GitHub: https://github.com/givanz/Vvveb Affected Version: 1.0.7.2 and likely prior versions CVE ID: CVE-2025-9728 Summa...
CVE-2025-64095
=== Descripción === DNN anteriormente DotNetNuke es una plataforma de gestión de contenidos web CMS de código abierto en el ecosistema de Microsoft. Antes de la versión 10.1.1, el proveedor de editor HTML predeterminado permite la carga de archivos no autenticados y las imágenes pueden sobrescrib...
CVE-2021-31761
CVE-2021-31761 Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution eXploit's...
reports
This folder contains some vulnerability reports I have disclosed over time. Barracuda Networks Load Balancer ADC - Multiple vulnerabilities CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - Stored XSS CVE-2015-1389 Network Solution WebMail - Multiple vulnerabilities Responsible...
CVE-2022-1597
CVE-2022-1597 The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks Affected Plugins: WPQA history.pushState'', '', '/' Nuclei Template:...
0l4bs
0l4bs Laboratorios de Cross-site scripting para entusiastas de la seguridad de aplicaciones web Lista de Desafíos : root@kitploit: Desafío 1 | URL Desafío 2 | Form Desafío 3 | User-Agent Desafío 4 | Referrer Desafío 5 | Cookie Desafío 6 | LocalStorage Desafío 7 | Login Page Desafío 8 | File Uploa...
CVE-2025-60656
CVE-2025-60656 - Cross-Site Scripting XSS Almacenado en la Página Principal | ---|--- Investigadores| DotAdrien Gravedad| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag...
sslscan
sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...
CVE-2026-14856-TastyIgniter
CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...
gitleaks
Gitleaks root@kitploit: ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks...
CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager
CMSmadesimple File Upload - XSS v2.2.18 Author: Sergio Description: File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in File Manager file upload sanitation allows you to upload a PDF file with hidden...
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...
traxss
Traxss Escáner Automatizado de Vulnerabilidades XSS | Escrito en Python3 | Utiliza Selenium Headless Forks DEMO Antecedentes ¡Traxss es un proyecto de Hacktoberfest! Si buscas un lugar para contribuir, siéntete libre. Traxss es un framework automatizado para escanear URLs y páginas web en busca d...
OpenNebula-CVE-2025-56536
OpenNebula-CVE-2025-56536 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in user information Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept :...
CVE-2017-7038
CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayloa...
xss_vulnerability_challenges
XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...
xss_vulnerability_challenges
Escenarios de Vulnerabilidad XSS desafíos Este repositorio es una aplicación PHP Dockerizada que contiene algunos desafíos de vulnerabilidad XSS. Las ideas detrás de los desafíos son: Bypass de validación de JavaScript Bypass de entidades HTML Bypass de WAF Bypass de validación de lista negra...
CVE-2023-45992
CVE-2023-45992 A vulnerability in Ruckus CloudPath 5.12 build 5538 or before could allows a remote unauthenticated attacker to obtain full administrator privileges by leveraging Stored Cross-Site Scripting and Cross-Site Request Forgery Vulnerability using a crafted script. On 16 Oct 2023, the...