JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X 存在存储型跨站脚本攻击（XSS）漏洞，通过课程大纲模块的文件上传功能利用。 供应商：https://github.com/changeweb/Unifiedtransform PoC 步骤 1：登录应用程序并导航到学术模块。 步骤 2：从学术模块使用随机数据创建学期、学年、班级、课程。 步骤 3：导航到课程大纲模块，填写所需详细信息，并在课程大纲文件上传输入中上传包含 XSS 载荷的 PDF 文件。 步骤 4：导航到班级 - 课程大纲并点击下载。 步骤 5：观察 XSS 被触发！...

CVE-2024-6050

CVE-2024-6050 Reflected XSS in SOWA OPAC Version: from 4.0 before 4.9.10, from 5.0 before 6.2.12. intext:"SOWA OPAC v." PoC root@kitploit: https://domain/index.php?KatID=0&typ=repl&plnk=q&fauthor=XSS...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

CVE-2026-90443

CVE-2026-90443 is a reflected cross-site scripting (XSS) vulnerability in a web interface associated with an Operational Technology (OT) product, as indicated by its CISA ICS-CERT CSAF advisory reference. The root cause is that a portion of the request URL is reflected into a script context and a...

infernal-twin

Infernal-Wireless v3 版本 3 改进并在 Kali Linux 2018 上增强兼容性 新增无线扫描的可视化展示 新增探测请求的可视化展示以及按设备请求的 SSID 地图 更新 MAC 地址映射 在探测请求设备上增加 MAC 地址映射 针对 WPA2 PSK 的邪恶双子攻击（使用提供的凭据） 自动无线扫描向导的开发测试 MiTM 改进并与 Metasploit 集成 改进无线网络的社会工程学方面 在无线扫描结果中添加信标信号 整理工具的文件结构和布局 创建专门的日志文件夹和管理 Infernal-Wireless v2.6 版本 2.6.11 新增和改进的功能：...

CVE-2023-41425

Wonder CMS RCE | | 描述 : XSS 到 RCE，Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ 将安装新主题的 JS 载荷 cat form+action=" EOF 启动新 Web 服务器以提供载荷 sudo python3 -m http.server $LPORTWEB & | | 将 RCE XSS 发送给管理员后，我们会得到以下 HTTP 调用 .. code-block:: 10.129.252.14 - - 11/Aug/2024 18:42:26 "GET /xssrce.js...

CVE-2023-37979

CVE-2023-37979 Unauth. Reflected Cross-Site Scripting XSS vulnerability in Saturday Drive Ninja Forms Contact Form plugin = 3.6.25 versions. PoC and Checker , for educational purposes only 'python3 exploit.py https://target.com'...

weaponised-XSS-payloads

Weaponised XSS Payloads XSS payloads designed to turn alert1 into P1. The Blog Post This repo was released alongside a blogpost titled "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 What is this? In this reposito...

Pybelt

NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

CVE-2022-2546

All-in-One WP Migration Affected versions All-in-One WP Migration 7.63 References Sucuri WPScan Hacking Force Cross-Site Scripting XSS...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS 存储型 XSS v.9.2.1 作者：Sergio 描述： ConcreteCMS v.9.2.1 中的跨站脚本（XSS）漏洞允许本地攻击者通过向页面设置（Page Settings）中的 SEO - Extra 注入特制脚本来执行任意代码。 攻击向量： 脚本注入。“SEO”中的“Header Extra Content”（标头额外内容）条目在清理（sanitization）方面存在漏洞，允许注入 JavaScript 代码，当用户访问网页时将执行该代码。 POC： 登录面板后，我们将进入“页面设置 - SEO”（Page Settings - SEO）。 XSS...

CVE-2017-9506

Proof of Concept SSRF & XSS root@kitploit: https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remo...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

CVE-2026-54165

Dobase , an open-source self-hosted workspace, is affected by a one-click stored DOM-based XSS in its public shared-folder image gallery. The root cause is that a file's name attribute is fully attacker-controlled and never sanitized; it is round-tripped through an ERB-escaped data-name attribute...

CVE-2022-42094

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...

Duplicate-of-CVE-2023-26982

Trudesk 版本 1.2.6 漏洞说明： Trudesk 1.2.6 版本被发现存在一个存储型跨站脚本（XSS）漏洞，通过工单 创建/修改工单标签 功能，涉及管理员角色。 攻击向量： 攻击者需要进入设置菜单，选择工单，然后向下滚动找到工单标签。点击 创建，在 添加标签 输入框中插入 XSS 有效载荷，创建标签 即可利用存储型 XSS。保存后 XSS 有效载荷会立即执行。 受影响： http://IP:8118/settings/tickets POST /api/v1/tags/create Parameter : tag 有效载荷： 测试环境： 1. Trudesk 1.2.6 版...

CVE-2021-28079

CVE-2021-28079 - POC Jamovi file example.omv example.omv: Zip archive data, at least v2.0 to extract All OMV files are archived data. So, you can extract it and modify to exploit the XSS bug. root@kitploit: 🔥\ unzip example.omv Archive: example.omv inflating: META-INF/MANIFEST.MF inflating:...

Typecho-Multiple-Vulnerabilities

Typecho 多个漏洞 此仓库包含以下漏洞的利用代码： CVE-2024-35538: Typecho v1.3.0 中存在客户端 IP 欺骗漏洞，恶意行为者可通过在 HTTP 请求中将任意 IP 指定为 "X-Forwarded-For" 或 "Client-Ip" 请求头的值来伪造其 IP 地址。 CVE-2024-35539: Typecho v1.3.0 的文章评论功能中存在竞态条件漏洞，攻击者可在垃圾评论防护检查评论是否发布过于频繁之前发布多条评论。 CVE-2024-35540: Typecho v1.3.0...