1125411 matches found
CVE-2023-41425
CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Utilizzo root@kitploit: ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local w...
CVE-2024-50962
Cross-Site-Scripting XSS in DonWeb Ferozo Webmail CVE-2024-50962 Beschreibung Eine Cross-Site-Scripting XSS-Sicherheitslücke in Ferozo Webmail v1.1 ermöglicht es Angreifern, beliebige Skripte über die Komponenten Identitäten und Automatische Antworten auszuführen. Diese Sicherheitslücke kann...
CVE-2024-22909
CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Prova di Concetto PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md Prova di Concetto PoC : https://github.com/BurakSevben/CVE-2024-22909/blob/main/CVE-2024-22909.md...
railsgoat
RailsGoat RailsGoat è un'applicazione web volutamente vulnerabile costruita su Ruby on Rails. Dimostra vulnerabilità di sicurezza reali della OWASP Top 10 e funge da piattaforma di formazione pratica per sviluppatori e professionisti della sicurezza. Cos'è RailsGoat? RailsGoat è un'applicazione...
CVE-2023-30943
CVE-2023-30943Moodle self-xss Отказ от ответственности Весь контент предоставлен "как есть", без каких-либо гарантий, явных или подразумеваемых. Авторы не несут ответственности за какой-либо ущерб, прямой или косвенный, возникший в результате использования информации или программного обеспечения,...
google-dorks-bug-bounty
Google Dorks für Bug Bounty Eine Liste von Google Dorks für Bug Bounty, Web Application Security und Pentesting Live-Tool Breite Domain-Suche mit Negativsuche root@kitploit: site:example.com -www -shop -share -ir -mfa PHP-Erweiterung mit Parametern root@kitploit: site:example.com ext:php inurl:?...
ezXSS
ezXSS ist eine einfache Möglichkeit für Penetrationstester und Bug-Bounty-Jäger, blindes Cross-Site-Scripting zu testen. ezXSS ist ein Tool, das entwickelt wurde, um Cross-Site-Scripting XSS-Schwachstellen zu finden und auszunutzen. Eine der wichtigsten Funktionen von ezXSS ist die Fähigkeit,...
go-toolset:rhel8 security, bug fix, and enhancement update
An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...
CVE-2026-54606
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary serialize-javascript is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-34043. Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
Important: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update
An update for golang is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update
An update for golang is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...