CVE-2021-46069

CVE-2021-46069 Titolo Exploit: Vehicle Service Management System - 'Elenco Meccanici' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46072

CVE-2021-46072 Titolo Exploit: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...

CVE-2012-2593

Atmail - Catena di Exploit XSS-CSRF-RCE PoC atmail-rce.py: Sfrutta CVE-2012-2593 nell'interfaccia webmail di Atmail. atmail-csrf.js: File Javascript che sfrutta CVE-2012-2593 per effettuare un CSRF al fine di installare un plugin malevolo che esegue una reverse shell Plugin.php: Plugin di Atmail ...

xss

Dieses Repository hat keine README-Datei...

CVE-2023-31584

CVE-2023-31584 - Vulnerabilità di Cross Site Scripting in cu/silicon Link Github: https://github.com/cu/silicon Versione interessata: 1 Gravità e CVSS: Verrà aggiornato al termine della revisione da parte di NIST. Tipo: Cross Site Scripting Causa principale: Mancanza di una corretta validazione e...

CVE-2021-43141

CVE-2021-43141 Informazioni su CVE-2021-43141, una XSS riflessa nella sezione planapplication...

CVE-2025-55888

CVE-2025-55888 Descrizione È stata scoperta una vulnerabilità di Cross-Site Scripting XSS nell'endpoint del gestore delle transazioni Ajax di ARD. Un attaccante può intercettare la risposta Ajax e iniettare JavaScript dannoso nel campo accountName. Questo input non viene adeguatamente sanificato ...

CVE-2021-45745

CVE-2021-45745 Exploit-Titel: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit-Autor: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM Referenzen: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2021-45744

CVE-2021-45744 Titolo dell'exploit: Bludit 3.13.1 - Cross Site Scripting XSS persistente nel campo TAGS Autore dell'exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Riferimenti: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting

Moodle Jitsi Meet 2.7 through 2.8.3 plugin contains a cross-site scripting vulnerability via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject JavaScript code to be run by the application. id: CVE-2021-26812 info: name: Moodle...

CVE-2025-14340

XSS per appropriazione dell'account admin CVE-2025-14340 Una vulnerabilità di Cross-Site Scripting nell'Interfaccia REST di Amministrazione di Payara permette l'esecuzione di JavaScript controllato dall'attaccante, portando all'appropriazione dell'account admin. A causa di: 1. Il pannello utilizz...

CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project User XSS PoC Dieses Repository enthält einen harmlosen Proof of Concept für CVE-2026-36226, eine Cross-Site-Scripting-Schwachstelle in Advantech WebAccess/SCADA 8.0-2015.08.16. Dieses Repository ist ausschließlich für autorisierte...

CVE-2020-11022

Ecco il punto Ecco il punto, ragazzi: CVE-2020-11022 è una vulnerabilità in jQuery nelle versioni inferiori alla 3.5.0 o successive; la vulnerabilità CVE-2020-11022 stessa consiste nell'innescare una XSS sfruttando la manipolazione del DOM, come i.e. .html, .append, e altre, per eseguire codice X...

CVE-2026-64638-WordPress-Core-XSS2Shell

CVE-2026-64638 — Nuclei-Erkennungsvorlage Nuclei-Vorlage zur nicht-intrusiven Erkennung von XSS2Shell , einer ohne Authentifizierung ausnutzbaren Differential-Parser-Schwachstelle im WordPress-Core, die das Einschleusen von DOM-Elementen in die Login-Seite ermöglicht und als Grundlage für eine...

CVE-2025-11926

CVE-2025-11926 Wordpress-Related-Posts-Lite-plugin-XSS-PoC Für PoC: https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC...

EUVD-2026-68015

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CASTHTML and inserts $restoredItem-Title, $restoredItem-URLSegment, $restoredItem-CMSEditLink, and...

weaponised-XSS-payloads

Payload XSS armati Payload XSS progettati per trasformare alert1 in P1. Il Post del Blog Questa repo è stata rilasciata insieme a un post del blog intitolato "Come Elevare i Tuoi Bug XSS da Medium a Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 Cos'è quest...

CVE-2026-76794

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

CVE-2026-50980

Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...