1252831 matches found
EUVD-2026-94986
IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2026-62142
Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...
CVE-2026-106611
Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...
CVE-2025-45407
CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...
Kentico-Xperience-before-13.0.178---XSS-POC
This repository does not have a README...
CVE-2024-21338-1
CVE-2024-21338 Este PoC fue desarrollado para el concurso XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...
CVE-2025-0133
Description: It is a POC for CVE-2025-0133 that is applicable only to PAN-OS firewall configurations with an enabled GlobalProtect gateway or portal. It checks issue on multiple URLs that accepts from file, with custom thread. You can also set you timeout and get results in a file. Example usage:...
CVE-2026-106611
The WPMU DEV Forminator plugin (versions n/a through 1.57.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is associated with CWE-352 and has a High base sever...
EUVD-2026-94955
Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...
WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Store Locator versions = 3.0.3...
CVE-2023-36158
CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
CVE-2022-3546
CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...
CVE-2020-8559
Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...
CVE-2019-12949
CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...
CVE-2019-12543
CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in PurchaseRequest.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter. Author: Concobe of Tarantula Team - VinCSS ...
CVE-2019-12542
CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SearchN.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. Author: Concobe of Tarantula Team - VinCSS a member of Vingroup...
CVE-2025-68930
š Analysis of CVE-2025-68930: WebSocket Hijacking Vulnerability in Traccar The CVE-2025-68930 exposes a critical Cross-Site WebSocket Hijacking CSWSH vulnerability in Traccar , the open-source GPS tracking system. Below are the key details: š”ļø Vulnerability Details Affected endpoint : /api/socket...
CVE-2025-55817
Vulnerability Type Cross Site Scripting XSS Affected Component The Connection Settings of the Nitro GraphQL by Chillicream, contain 3 different input locations vulnerable to Cross Site Scripting XSS. Vulnerable Parameters : SDL Schema Endpoint, Subscription Endpoint, SSE Subscription Endpoint...
EUVD-2026-94932
Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...
CVE-2026-62142
The Melapress WP 2FA plugin (wp-2fa) for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions 4.1.0 and below . This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The documentation does not specify the exact component...