CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Exploit Title: Rafed CMS Website v1.44 - Cross Site Scripting XSS Date: 2024-03-12 CVE: CVE-2024-55060 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.rafed-system.org/ Software Link: N/A Version: 1.44 Tested on...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Vulnearability Report of the New Jersey official site Potential XSS vulnerability in jQuery.htmlPrefilter and related methods. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others...

Exploite-CVE-2023-30212-Vulnerability

create a vulnerable Docker environment that is susceptible to CVE-2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

CVE-2023-2822-demo

CVE-2023-2822-demo Simple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822. Based on the writeup at https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb. docker build -t...

XSS-Payloads

This repository does not have a README...

Exploit-Medium-CVE-2021-41184

Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS in the of option of the .position util 1. jQuery ui version v1.12.1 vulnerable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Concept...

CVE-2024-40507

CVE-2024-40507 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMPersonnel.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMPersonnel.asmx function. Vulnerable Product...

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user. Reffer to: https://github.com/G37SYS73M/AdvisoryG37SYS73M/blob/main/CVE-2022-46087/poc.md...

cobaltstrike_swing_xss2rce

This repository does not have a README...

CVE-2020-9460

CVE-2020-9460 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in...

https-nj.gov---CVE-2020-11023

https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...

CKEditor: Cross-site scripting (XSS) in the engine package

Impact A Cross-Site Scripting XSS vulnerability has been discovered in the CKEditor 5 engine. This vulnerability could be triggered by inserting specially crafted markup under a specific General HTML Support configuration that allows inserting objects, leading to unauthorized JavaScript code...

GHSA-V6MG-96C6-GMPQ CKEditor: Cross-site scripting (XSS) in the engine package

Impact A Cross-Site Scripting XSS vulnerability has been discovered in the CKEditor 5 engine. This vulnerability could be triggered by inserting specially crafted markup under a specific General HTML Support configuration that allows inserting objects, leading to unauthorized JavaScript code...

CKEditor: Cross-site scripting (XSS) in the engine package

Impact A Cross-Site Scripting XSS vulnerability has been discovered in the CKEditor 5 engine. This vulnerability is caused by a prototype pollution issue in the es-toolkit library used in the CKEditor 5 codebase. This vulnerability could lead to unauthorized JavaScript code execution when the...

GHSA-RH54-VFFM-5FVP CKEditor: Cross-site scripting (XSS) in the engine package

Impact A Cross-Site Scripting XSS vulnerability has been discovered in the CKEditor 5 engine. This vulnerability is caused by a prototype pollution issue in the es-toolkit library used in the CKEditor 5 codebase. This vulnerability could lead to unauthorized JavaScript code execution when the...

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...

CVE-2023-24488

CVE-2023-24488 POC for CVE-2023-24488 Citrix Gateway Open Redirect and XSS CVE-2023-24488 URL query parameters are not adequately sanitised before they are placed into an HTTP Location header. An attacker can exploit this to create a link which, when clicked, redirects the victim to an arbitrary...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...