CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat Examples XSS Exploit...

CVE-2023-46974

CVE-2023-46974 POC Description Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

CVE-2022-30507-PoC

Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...

CVE-2025-45407

CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...

CVE-2017-9934

CVE-2017-9934 I am the reporter of this exploit, under name: Envo Joomla 1.7.3 - 3.7.2 CSRF exploit PoC This vulnerability works due to Joomla versions 1.7.3 to 3.7.2 not sanitizing base64 input. Headers: root@kitploit: POST...

Kentico-Xperience-before-13.0.178---XSS-POC

This repository does not have a README...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Download the environment, unzip it, and enter root@kitploit: unzip cve-2024-4367-lab cd cve-2024-4367-lab Environment startup command root@kitploit: mkdir upload chmod 777 upload docker-compose up -d...

cPanel-CVE-2023-29489

POC para cPanel CVE-2023-29489 XSS Payload...

CVE-2024-21338-1

CVE-2024-21338 Este PoC foi desenvolvido para o concurso XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

hackazon

Hackazon Hackazon é um site de teste vulnerável gratuito, uma loja virtual construída com as mesmas tecnologias usadas nos aplicativos modernos ricos e móveis. O Hackazon possui uma interface AJAX, workflows rigorosos e APIs RESTful usadas por um aplicativo móvel complementar, fornecendo um...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2025-0133

...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-30691

CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allo...

CVE-2024-34312

CVE-2024-34312 الوصف تم اكتشاف أن المختبر الافتراضي للبرمجة لـ Moodle حتى الإصدار v4.2.3 يحتوي على ثغرة Cross-Site Scripting XSS عبر مكوّن IDE. تفاصيل إضافية يتصل المتصفح مباشرةً بويب سوكيت websocket يعمل على خادم العزل. عبر هذا الويب سوكيت، يمكن لخادم العزل إرسال رسائل مباشرةً إلى المتصفح. يتم...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to XSS vulnerability EBICS server (CVE-2025-14504)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability Vulnerability Details CVEID:CVE-2025-14504 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 through 6.2.1.11, and...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to XSS security vulnerability in the dashboard UI (CVE-2023-40693)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the XSS security vulnerability Vulnerability Details CVEID:CVE-2023-40693 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, and 6.2.0.0 through 6.2.0.51, 6.2.1.0 through...