1252720 matches found
WSO2-2020-0731
WSO2-2020-0731: XXE and XSS vulnerabilities in WSO2 Carbon A potential XXE and XSS have been identified in multiple WSO2 Products. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor requested a CVE for these...
WSO2-2021-1261
WSO2-2021-1261: Multiple Cross-Site Scripting in WSO2 ESB Due to improper output encoding, multiple Cross Site Scripting XSS attacks have been identified in WSO2 ESB. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor...
jvmtiAgentLoad-Exploit
Arbitrary code execution via jvmtiAgentLoad Description: Tools and code for generating a malicious JAR to exploit jvmtiAgentLoad Usage: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux Target The following command generates a JAR mal.jar that can be used on ...
CVE-2023-37191
CVE-2023-37191 — Issabel PBX 4.0.0-6: Stored Cross-Site Scripting XSS Overview Field| Details ---|--- CVE ID| CVE-2023-37191 Product| Issabel PBX issabel-pbx Affected Version| 4.0.0-6 Vulnerability Type| Stored Cross-Site Scripting XSS Severity| Medium Discovery Date| 7 July 2023 Discovered By|...
sudowp-hooks-visualizer
SudoWP Hooks Visualizer Contributors: SudoWP, WP Republic Original Authors: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.3.2 License: GPLv2 or later Security Notice CVE-2024-6297...
CVE-2023-37596
CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...
CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script
CVE-2026-21013 – PDF JavaScript Injection via Embedded Script Program Code Python generating malicious PDF generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f: f.writepdf print"malicious.pdf create...
CVE-2023-33731
CVE-2023-33731 — eScan Management Console: Reflected Cross-Site Scripting XSS -orange Table of Contents Overview Vulnerability Details Severity & CVSS Score Affected Product Technical Analysis Proof of Concept Impact Mitigation & Remediation Disclosure Timeline References Author Overview A...
Azure-APIM-Dev-Portal-Signup-Bypass
A proof-of-concept script for bypassing a disabled developer portal signup on Azure API Management APIM by directly invoking the backend registration API. What it does Azure APIM developer portals can be configured to disable self-service signup through the portal UI. In some deployments the...
BruteXSS
⚠️ This project has been discontinued. ⚠️ BruteXSS BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience. This tool is developed in Python, so...
1CRM-CVE
1CRM-CVE 1CRM Software Vulnerability Vulnerabilities List CVE-2019-14221: Stored Cross Site Scripting...
https-nj.gov---CVE-2019-8331
https-nj.gov---CVE-2019-8331 Vulnearability Report of the New Jersey official site Bootstrap 4.0.0 Found in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Vulnerability info: Medium 28236 XSS in data-template, data-content and data-title properties of tooltip/popover...
Cross-Site Scripting (XSS)
Ghost is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to imported SVG images being stored without sanitization, which allows an attacker to convince an Administrator to import a crafted file and host malicious scripts on the site's domain, potentially compromising staff users'...
golismero
¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...
panopticon
DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...
pupy
Pupy Simple Installation pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init git...
SiteBroker
SiteBroker A cross-platform python based utility for information gathering and penetration automation! Output Sitebroker's Full Output Easy way Docker Image You can simply run this docker image to test SiteBroker without installing python packages system-wide or in a virtualenv. docker build -t...
varc
varc Volatile Artifact Collector varc collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident. It creates a zip, which contains a number of different pieces of data to understand what is...
CVE-2024-37383_PoC
This is a repository for hands-on practice of the CVE-2024-37383 vulnerability. Analysis Report: blog / pdf CVE-2024-37383 Detail Name : Roundcube Webmail SVG Parsing XSS Target : Roundcube Webmail v1.5.7 or v1.6.x tag into an email, arbitrary scripts are executed in the browser. Exploit git clon...