1125463 matches found
TCL-xss-Labs
XSS Lab — The Cyber Ledger 💸 Se questo progetto ti aiuta, considera di supportarlo con una donazione di $10 per farlo crescere. Link: https://rzp.io/rzp/zgkC6h5B Una piattaforma interattiva e auto-ospitata per l'addestramento su XSS con 33 sfide progressivamente più difficili — progettata per...
WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...
SuiteCRM-RCE
CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
BIT-KEYCLOAK-2026-9086 Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass
A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, could bypass client Uniform Resource Identifier URI validation. This is achieved by registering a malicious client with a...
CVE-2026-16231
hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...
Exploite-CVE-2023-30212-Vulnerability
Crea un ambiente Docker vulnerabile suscettibile a CVE-2023-30212 Descrizione L'ambiente Docker e lo sfruttamento della vulnerabilità CVE-2023-30212. CVE-2023-30212 è una vulnerabilità di sicurezza che interessa le versioni di OURPHP precedenti o uguali alla 7.2.0. Questa vulnerabilità consente...
-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212
crea un ambiente Docker vulnerabile suscettibile a CVE 2023-30212 Descrizione Ambiente Docker ed exploit della vulnerabilità CVE-2023-30212. VE-2023-30212 è una vulnerabilità di sicurezza che colpisce le versioni di OURPHP precedenti o uguali alla 7.2.0. Questa vulnerabilità consente attacchi di...
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...
DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization
A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and...
CVE-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...
CVE-2024-39248
Titolo Exploit: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Autore Exploit: Jason Jacobs 0xjasonjacobs - Twitter Homepage del fornitore: https://sourceforge.net/projects/simpcms/ Endpoint vulnerabile: /SimpCMS/admin.php Una vulnerabilità di cross-site scripting XSS in SimpCMS v0.1...
WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by lanlv - HPT Vietnam Coporation in WordPress Plugin WP w3all phpBB versions = 3.0.6...
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Music Player for WooCommerce versions = 1.8.9...
CVE-2023-0214
SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ von 0PTS Proof of Concept für die Schwachstelle HTTP Response Splitting in...
CVE-2023-51802
CVE-2023-51802 Simple Student Attendance System v.1.0 - attendancereport में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरियाँ विवरण : Simple Student Attendance System v.1.0 में क्रॉस साइट स्क्रिप्टिंग कमजोरी एक दूरस्थ हमलावर को attendancereport घटक में "page" या "classmonth" पैरामीटर में एक क्राफ्टेड पेलोड ...
CVE-2023-49540
CVE-2023-49540 Book Store Management System v1.0 - Vulnerabilità Cross-site scripting XSS in /index.php/history - campo vulnerabile: "Customer's Name". Descrizione : è stato scoperto che Book Store Management System v1.0 contiene una vulnerabilità cross-site scripting XSS in...
WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Aydan Arabadzha in WordPress Plugin Realtyna Organic IDX plugin versions = 5.4.1...
WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin CP Media Player versions = 1.3.0...