CVE-2023-42426

CVE आईडी: CVE-2023-42426 भेद्यता प्रकार: क्रॉस-साइट स्क्रिप्टिंग विवरण: फ्रोआला फ्रोआला एडिटर v.4.1.1 में क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता दूरस्थ हमलावरों को 'इमेज डालें' घटक में 'लिंक डालें' पैरामीटर के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। पुनरुत्पादन के चरण: 1. "इमेज डालें"...

Scanner-and-Patcher

Scanner e Patcher Panoramica: Il progetto Scanner e Patcher fa parte del framework AlphaSecure, che è stato presentato e pubblicato all'ACM IC3 2024 con il titolo AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Using Automated...

CVE-2025-28074

CVE-2025-28074 Descrição sugerida phpList anterior à versão 3.6.3 é vulnerável a Cross-Site Scripting XSS devido à sanitização inadequada de entrada em lt.php. A vulnerabilidade é explorável quando a aplicação referencia dinamicamente caminhos internos e processa entrada não confiável sem escape,...

CVE-2021-32644

CVE-2021-32644 该漏洞是影响 Ampache 4.4.3 之前版本的 XSS 漏洞。 https://nvd.nist.gov/vuln/detail/CVE-2021-32644 安装及运行步骤 1. Ampache 安装 进行安装时，请先在 docker-compose.yml 文件中配置端口转发。 当前安装的 Ampache 版本为 4.4.2。 root@kitploit: $docker-compose up 2. 访问 Amapache 转到 http://web-server ip:port/ 2. 访问 Amapache 并配置 MySQL 转到...

CVE-2022-29455

CVE-2022-29455 WordPress भेद्यता - XSS क्रॉस-साइट स्क्रिप्टिंग भेद्यता स्थान https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js भेद्य संस्करण = 3.5.5 संस्करण प्रमाण की अवधारणा शोषण https://add your target...

CVE-2024-48392-PoC

CVE-2024-48392 Exploit Übersicht Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2024-48392, eine XSS-Schwachstelle, die in Orangescrum selbst gehostet sowie in der Premium-Version entdeckt wurde. CVE-ID: CVE-2024-48392...

CVE-2025-55888

CVE-2025-55888 Descrizione È stata scoperta una vulnerabilità di Cross-Site Scripting XSS nell'endpoint del gestore delle transazioni Ajax di ARD. Un attaccante può intercettare la risposta Ajax e iniettare JavaScript dannoso nel campo accountName. Questo input non viene adeguatamente sanificato ...

CVE-2024-24134

CVE-2024-24134 : Menu Cibo Online - Cross-Site-Scripting Proof of ConceptPoc : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24134.md Proof of ConceptPoc : https://github.com/BurakSevben/CVE-2024-24134/blob/main/CVE-2024-24134.md...

CVE-2024-22890

CVE-2024-22890: Meine e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22890/blob/main/CVE-2024-22890.md...

CVE-2026-30503-OpenKM-6.3.12-Stored-XSS

🛡️ CVE-2026-30503 — ثغرة XSS مخزّنة في OpenKM v6.3.12 اكتشفها وقدّمهاDharmendra Kumar — باحث أمني الأمن السيبراني | اختبار الاختراق | أبحاث الثغرات | الإفصاح المسؤول 📌 فهرس المحتويات نظرة عامة تفاصيل CVE المنتج المتأثر وصف الثغرة تحليل السبب الجذري تقييم الأثر والمخاطر إثبات المفهوم PoC المعالجة...

cve-2023-40000

cve-2023-40000 이것은 cve-2023-40000의 PoC입니다. Wordpress LiteSpeed Cache 익스플로잇입니다. 이 CVE는 모든 LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

CVE-2022-43117

Descrizione suggerita L'applicazione Password Storage Application in PHP/OOP e MySQL 1.0 di Sourcecodester è stata scoperta contenere multiple vulnerabilità di cross-site scripting XSS tramite i parametri Name, Username, Description e Site Feature. Informazioni aggiuntive Prova di concetto:...

CVE-2024-6536

Descrizione Questo script è una PoC per CVE-2024-6536, dove è possibile una XSS nel plugin Zephyr Project Manager per Wordpress. Richiede autenticazione e privilegi come amministratore del project manager. Utilizzo root@kitploit: python3 CVE-2024-6536.py -u -p -w Esempio: python3 CVE-2024-6536.py...

CVE-2020-11022

Ecco il punto Ecco il punto, ragazzi: CVE-2020-11022 è una vulnerabilità in jQuery nelle versioni inferiori alla 3.5.0 o successive; la vulnerabilità CVE-2020-11022 stessa consiste nell'innescare una XSS sfruttando la manipolazione del DOM, come i.e. .html, .append, e altre, per eseguire codice X...

CVE-2024-48415

CVE-2024-48415 Descrizione itsourcecode Loan Management System v1.0 è vulnerabile a Cross Site Scripting XSS tramite un payload appositamente predisposto nei parametri lastname, firstname, middlename, address, contactno, email e taxid nella funzionalità new borrowers della pagina Borrowers. Tipo ...

CVE-2026-39275

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

mitigation-cve-2019-9787

mitigation-cve-2019-9787 POC 1. semplice xss : 2. semplice csrf: codice del sito web dell'attaccante--- https://github.com/kuangting4231/wordpress.github.io 3. csrf esecuzione remota di codice: codice del sito web dell'attaccante--- https://github.com/kuangting4231/assigment1.github.io mitigazion...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS-Sicherheitslücke Informationen Beschreibung:XSS wurde in ManageEngine ServiceDesk Plus Version entdeckt. Betroffene Versionen: 9.3 Forscher: Dang The Tuyen Proof-of-concept Die Schwachstelle beruht auf der Verwechslung von einfachen...

CVE-2020-9460

CVE-2020-9460 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross-Site-Scripting - Oempro Octech Oempro 4.7 bis 4.11 ermöglicht XSS durch einen authentifizierten Benutzer. Der...

CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

Créditos para @kevin-mizu https://github.com/kevin-mizu/Werkzeug-CVE-2022-29361-PoC/tree/main para detalhes, leia: https://mizu.re/post/abusing-client-side-desync-on-werkzeug Testado no Chromium 119.0.6045.123 compilado em Debian trixie/sid, rodando em Debian kali-rolling...