Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)

Pre-authentication reflected XSS in WordPress wp-login.php CVE-2026-64638. The flaw exploits a parser differential between PHP striptags and WordPress KSES. Tags with whitespace after e.g. " area" survive striptags but are normalized to valid HTML by KSES, leading to attacker-controlled DOM...

CentOS-Control-Web-Panel-CVE

CentOS Control Web Panel Version 0.9.8.836 - 0.9.8.847 Am 29. Juni 2019 begann unser Team, Schwachstellen im CentOS Control Web Panel CWP Version 0.9.8.836 zu suchen, und wir fanden einige kritische Schwachstellen. Einige der von uns gefundenen Schwachstellen können zu einer Kette verbunden werde...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : 在线医生预约系统中的多个存储型XSS漏洞 在线医生预约系统V1.0中存在多个经身份验证的存储型跨站脚本漏洞 软件链接：https://www.sourcecodester.com/download-code?nid=14663&title=Online+Doctor+Appointment+System+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25791...

XSSYA

XSSYA-V2.0 è stato rilasciato - vedi https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA è uno scanner per Cross Site Scripting e conferma di vulnerabilità funziona con due metodi • Metodo numero 1 per la conferma di richiesta e risposta • Metodo numero 2 per la conferma: esegue il payload...

CVE-2019-1218

CVE-2019-1218 Уязвимость спуфинга Outlook для iOS Я обнаружил XSS в мобильном приложении Outlook для IOS. Серьёзная уязвимость в Microsoft Outlook для IOS, которая может позволить злоумышленнику получить контроль над устройством жертвы. Эта проблема безопасности даёт злоумышленнику возможность...

CVE-2023-29489

CVE-2023-29489 La vulnérabilité de sécurité est enregistrée dans le système Common Vulnerabilities and Exposures CVE. Plus précisément, cette vulnérabilité concerne cPanel, un logiciel populaire de gestion d'hébergement. Cette faille permet des attaques de cross-site scripting XSS via des requête...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - toolchain de exploit XSS CSRF RCE PacketStorm WLB-2020080010 Aviso: este toolchain de exploit foi inspirado por EDB-ID 20009. Objetivo O objetivo deste toolchain de exploit é substituir o EDB-ID 20009. Vantagens deste toolchain sobre o exploit EDB-ID 20009:...

CVE-2024-56289

CVE-2024-56289 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Nome del componente WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg Versione vulnerabile = 3.7.3.2 Slug del componente groundhogg Link del componente...

XSSight

WARNUNG: Diese Seite dient ausschließlich zu Bildungszwecken. Jede böswillige Verwendung durch die Benutzer wird nach den gesetzlichen Bestimmungen bestraft! XSSight Cross-site Scripting XSS Cross-site Scripting XSS ist eine Angriffstechnik, bei der vom Angreifer bereitgestellter Code in die...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prova di concetto Per sfruttare la vulnerabilità, Bolt CMS 3.6.2 consente XSS tramite l'input di testo facendo clic sul pulsante di...

Craft-CMS-3.0.25---Cross-Site-Scripting

Craft-CMS-3.0.25 - Cross-Site-Scripting Craft CMS 3.0.25 - Vulnerabilità Cross-Site Scripting CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 Prova di concetto Consente di eseguire un attacco Cross-Site Scripting salvando un nuovo titolo dalla scheda della console. root@kitploit: POST...

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 Ein einfacher PoC zur Reproduktion einer XSS-Schwachstelle Schritte npm i npm run start Gehe zu localhost:3006...

CVE-2021-39476

CVE-2021-39476 Mehrere XSS-Schwachstellen in PhoenixCart 1.0.8.0 gefunden 2x XSS auf derselben Seite "Titel der Kategorie für SEO bearbeiten:" "Beschreibung der Kategorie bearbeiten" Link: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...

CVE-2019-8331

Eng Descrição O CVE-2019-8331 é uma vulnerabilidade de segurança do tipo Cross-Site Scripting XSS encontrada no Bootstrap, uma biblioteca JavaScript amplamente utilizada no desenvolvimento de sites e aplicações móveis. Essa vulnerabilidade ocorre pois o Bootstrap não filtra adequadamente os dados...

CVE-2020-16270

CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...

weaponised-XSS-payloads

Payload XSS armati Payload XSS progettati per trasformare alert1 in P1. Il Post del Blog Questa repo è stata rilasciata insieme a un post del blog intitolato "Come Elevare i Tuoi Bug XSS da Medium a Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 Cos'è quest...

xss-payload-list

xss-payload-list 🎯 قائمة حمولات ثغرة البرمجة النصية عبر المواقع XSS...

CVE-2023-30212

CVE-2023-30212 Окружение Docker и эксплуатация CVE-2023-30212 — это уязвимость безопасности, которая затрагивает версии OURPHP до или равных версии 7.2.0 .Эта уязвимость позволяет осуществлять межсайтовый скриптинг XSS атаки...

CVE-2023-43263

CVE-ID : CVE-2023-43263 Schwachstellentyp : Cross-Site Scripting Beschreibung : Eine Cross-Site Scripting XSS-Schwachstelle in Froala Editor v.4.1.1 ermöglicht es Angreifern, beliebigen Code über die Markdown-Komponente auszuführen. Schritte zur Reproduktion : Payload in der...