CVE-2021-46067

CVE-2021-46067 Titre de l'exploit : Vehicle Service Management System - 'Multiple' Vol de cookies conduisant à une prise de contrôle complète du compte Auteur de l'exploit : SANU P.L CVE : CVE-2021-46067 CVSS : 9.8 CRITIQUE Références :...

CVE-2024-6529

Prova di Concetto PoC per Vulnerabilità nei Plugin WordPress Questo repository contiene script di Prova di Concetto PoC per varie vulnerabilità scoperte in diversi plugin WordPress. Questi script dimostrano come un attaccante può sfruttare queste vulnerabilità per eseguire azioni dannose. Indice...

WebView2-Cookie-Stealer

Post del blog Per maggiori informazioni, si prega di leggere questo post del blog. Codice sorgente Questo codice è una versione modificata del codice WebView2 di Microsoft. Il codice attuale può essere ripulito e reso molto migliore. Demo Esempio di avvio Esempio di utilizzo Utilizzo Testato su...

CookieCatcher

CookieCatcher O CookieCatcher é uma aplicação de código aberto criada para auxiliar na exploração de vulnerabilidades XSS Cross Site Scripting em aplicações web, com o objetivo de roubar IDs de sessão de usuários também conhecido como Session Hijacking. O uso desta aplicação é puramente educacion...

CVE-2021-42664

CVE-2021-42664 CVE-2021-42664 - Gespeicherte Cross-Site-Scripting-Schwachstelle im Engineers Online-Portal-System. Technische Beschreibung: Eine gespeicherte XSS-Schwachstelle existiert im Engineers Online-Portal-System. Ein Angreifer kann diese Schwachstelle ausnutzen, um javascript im Namen des...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - ऑनलाइन इवेंट बुकिंग और आरक्षण प्रणाली संस्करण 2.3.0 में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग भेद्यता। तकनीकी विवरण: इवेंट प्रबंधन सॉफ्टवेयर संस्करण 2.3.0 में एक संग्रहीत XSS भेद्यता मौजूद है। एक हमलावर इस भेद्यता का उपयोग करके वेब सर्वर के उपयोगकर्ताओं की ओर से...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Múltiplo' Roubo de Cookies Leva à Assunção Total de Conta Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO References:...

CVE-2024-34568

Exploit-Titel: LetterPress = 1.2.1 - Cookie-Diebstahl-Schwachstelle Exploit-Autor: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L Referenzen: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

EUVD-2018-13358

Malware in sbrugna...

EUVD-2019-5890

Malware in sbrugna...

EUVD-2019-6242

Malware in sbrugna...

EUVD-2021-15889

Malware in sbrugna...

EUVD-2021-29625

Malicious code in bioql PyPI...

EUVD-2022-35232

Malicious code in bioql PyPI...

EUVD-2022-3314

Malicious code in bioql PyPI...

EUVD-2021-29623

Malicious code in bioql PyPI...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2021-42662

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

CVE-2021-29250

BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting XSS vulnerability within the POS Add Products functionality. This enables cookie stealing...

CVE-2020-27885

Cross-Site Scripting XSS vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of th...