POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-32621 - PoC de contaminación de prototipos en Apollo Federation Descripción general...

CVE-2026-1031

IBM Common Licensing Agent versions 9.0, 9.0.0.1, 9.0.0.2 and IBM ART versions 9.0, 9.0.0.1, 9.0.0.2 are affected by a cross-site scripting vulnerability. An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI, altering its intended functionality and potentially leading to ...

test-xss-swagger-CVE-2019-1749

This repository does not have a README...

CVE-2020-11022

So here's the thing So here's the thing guys, CVE-2020-11022 is a vulnerability in jQuery versions below 3.5.0 or above, CVE-2020-11022 itself triggers an XSS by leveraging DOM Manipulation e.g., .html, .append, and others to execute malicious XSS code. 1. Verify jQuery Version: Make sure the...

CVE-2026-64638-WordPress-Core-XSS2Shell

CVE-2026-64638 — Nuclei Detection Template Template Nuclei for non-intrusive detection of XSS2Shell , a pre-authenticated differential parser in WordPress Core that allows injection of DOM elements into the login page, serving as the basis for an XSS → RCE chain. ⚠️ This template only detects the...

CVE-2026-13623

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Theme API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users with administrator privileges to read or write...

XSS2Shell-CVE-2026-64638

This repository does not have a README...

EUVD-2026-82789

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...

CVE-2018-25031

POC de Cross-Site Scripting en Swagger UI: CVE-2018-25031 utilizando Selenium en Python Este repositorio contiene un script en Python que demuestra una prueba de concepto POC de una vulnerabilidad de Cross-Site Scripting XSS en Swagger UI, usando la biblioteca Selenium. El objetivo de esta POC es...

WSO2-2020-0731

WSO2-2020-0731: XXE and XSS vulnerabilities in WSO2 Carbon A potential XXE and XSS have been identified in multiple WSO2 Products. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor requested a CVE for these...

WSO2-2021-1261

WSO2-2021-1261: Multiple Cross-Site Scripting in WSO2 ESB Due to improper output encoding, multiple Cross Site Scripting XSS attacks have been identified in WSO2 ESB. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Cross-Site Scripting Almacenado XSS Resumen...

sudowp-hooks-visualizer

SudoWP Hooks Visualizer Colaboradores: SudoWP, WP Republic Autores originales: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requiere al menos: 5.8 Probado hasta: 6.7 Etiqueta estable: 1.3.2 Licencia: GPLv2 o posterior Aviso de segurid...

CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script

CVE-2026-21013 – PDF JavaScript Injection via Embedded Script Program Code Python generating malicious PDF root@kitploit: generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f: f.writepdf...

CVE-2023-33731

CVE-2023-33731 — eScan Management Console: Reflected Cross-Site Scripting XSS -orange Table of Contents Overview Vulnerability Details Severity & CVSS Score Affected Product Technical Analysis Proof of Concept Impact Mitigation & Remediation Disclosure Timeline...

1CRM-CVE

1CRM-CVE 1CRM Software Vulnerability Vulnerabilities List CVE-2019-14221: Stored Cross Site Scripting...

https-nj.gov---CVE-2019-8331

https-nj.gov---CVE-2019-8331 Informe de vulnerabilidad del sitio oficial de Nueva Jersey Bootstrap 4.0.0 Encontrado en https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Información de vulnerabilidad: Medium 28236 XSS en las propiedades data-template, data-content y data-title de...

hackazon

Hackazon Hackazon 是一个免费的、存在漏洞的测试网站，它是一个在线商店，使用了当今富客户端和移动应用所采用的技术构建。Hackazon 拥有 AJAX 界面、严格的工作流以及由配套移动应用使用的 RESTful API，为 IT 安全专业人员提供了独特的有效训练和测试平台。而且，它充满了你喜爱的各种漏洞，如 SQL 注入、跨站脚本等。 当今的 Web 和移动应用以及 Web 服务包含大量新技术，这些技术并未得到充分的安全性测试。IT 安全专业人员迫切需要一种存在漏洞的 Web 应用，用于测试其工具的有效性并磨练自身技能。 Hackazon...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2024-37383_PoC

Repositorio para practicar directamente la vulnerabilidad CVE-2024-37383. Informe de análisis: blog / pdf CVE-2024-37383 Detalle Nombre : Roundcube Webmail SVG Parsing XSS Objetivo : Roundcube Webmail v1.5.7 o v1.6.x manipulada en un correo electrónico, se ejecuta un script arbitrario en el...