CVE-2026-81291

CVE-2026-81291 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Uncode theme , affecting versions ≤ 2.12.7 . The vulnerability was discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. With a CVSS 3.1 score of 7.1 (HIGH) , it has a network attack vector , low co...

WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WCFM Marketplace versions = 3.8.2...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF Box — جهاز افتراضي لاستغلال متعدد المراحل 💀 Kalaichelvan Thieveshkar CB013248 · جامعة ستافوردشاير · COMP50003 - Cyber Security II نظرة عامة RootQuest هو جهاز افتراضي مصمم خصيصًا لتحدي CTF يحتوي على مسار هجوم تسلسلي من 10 مراحل ، يمتد عبر 5 مجالات أمنية. كل تحدٍ يُنتج مخرجات مطلوبة...

WordPress Affiliate Super Assistent plugin <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability

Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability discovered by theviper17y in WordPress Plugin Affiliate Super Assistent versions = 1.10.2...

CVE-2026-82805

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

CVE-2023-33829-POC

CVE-2023-33829-POC XSS في SCM Manager...

EUVD-2026-68614

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

CVE-2026-82805

Typora (versions up to 1.13.8/1.14.6) is affected by a cross-site scripting (XSS) vulnerability in its Mermaid Rendering Engine . The flaw is triggered by manipulation of the classDef/style argument, and the attack can be launched remotely, though it requires user interaction (e.g., opening a cra...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 عنوان الاستغلال: نظام إدارة خدمة المركبات - ثغرة برمجة نصية عبر المواقع مخزنة XSS في 'قائمة الفئات' مؤلف الاستغلال: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 متوسط المراجع: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2025-4123

استغلال Grafana CVE-2025-4123 معرّف CVE: CVE-2025-4123 الخطورة: عالية التأثير: تزوير الطلبات من جانب الخادم SSRF، البرمجة النصية عبر المواقع XSS الإصدارات المتأثرة: Grafana 11.2, Grafana 11.3, Grafana 11.4, Grafana 11.5, Grafana 11.6, Grafana 12.0 الشرح الكامل الشرح root@kitploit: ❯ sudo python...

Exploite-CVE-2023-30212-Vulnerability

إنشاء بيئة Docker قابلة للاستغلال وعرضة لثغرة CVE-2023-30212 الوصف بيئة Docker واستغلال ثغرة CVE-2023-30212. CVE-2023-30212 هي ثغرة أمنية تؤثر على إصدارات OURPHP السابقة أو المساوية للإصدار 7.2.0. تسمح هذه الثغرة بهجمات Cross-Site Scripting XSS OURPHP sudo apt update sudo apt install docker.io...

CVE-2023-29489

CVE-2023-29489 مسح ضخم للثغرة الأمنية في Cpanel XSS كالي لينكس sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaal shodan pkg...

CVE-2022-30507-PoC

الوصف تنفيذ التعليمات البرمجية عن بُعد RCE عن طريق تنفيذ كود جافاسكريبت - البرمجة النصية عبر المواقع XSS وعملية العرض عبر nodeintegration المسؤولة عن عملية العرض والوصول إلى كود node js فيديو PoC المرجع https://www.vicarius.io/vsociety/blog/arbitrary-code-execution-in-notable-cve-2022-30507...

CVE-2024-37888

CVE-2024-37888 يحتوي هذا المستودع على تفاصيل الثغرة واستغلالها لـ CVE-2024-37888 التي تم اكتشافها والإبلاغ عنها من قبلي. المقاييس CWE-79: الإلغاء غير الصحيح للمدخلات أثناء إنشاء صفحة الويب البرمجة النصية عبر المواقع CVSS: 6.1 MEDIUM نظرة عامة على الثغرة يوضح هذا الإثبات العملي POC استغلال ثغرة XS...

cPanel-CVE-2023-29489

POC pour cPanel CVE-2023-29489 XSS Charge utile...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

CVE-2024-30270-PoC

Ce script est conçu pour exploiter les vulnérabilités d'une instance Mailcow en utilisant le Cross-Site Scripting XSS et l'exécution de code à distance RCE. Le script vise à : Injecter une charge utile XSS dans une interface web Mailcow. Utiliser la charge utile XSS pour exécuter des actions non...