Wordpress_xss-CVE-2022-29455

This repository does not have a README...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 漏洞标题：车辆服务管理系统 - '用户列表' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE：CVE-2021-46073 CVSS：4.8 中危 参考： https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46073 https://vulners.com/cve/CVE-2021-46073 描述：...

EUVD-2026-80117

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to...

CVE-2026-19619

CVE-2026-19619 affects GitLab CE/EE versions 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. The vulnerability is a cross-site scripting (XSS) flaw caused by improper sanitization of pasted HTML content in the Content Editor . Under certain conditions, an unauthenticated attacker ...

CVE-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

CVE-2026-78252

GitLab CE/EE versions from 15.3 before 19.1.8 , 19.2 before 19.2.6 , and 19.3 before 19.3.2 are affected by improper sanitization of user-controlled data in the Markdown JSON table renderer . Under certain conditions, an authenticated user could induce a targeted user to perform unintended state-...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 漏洞标题: Vehicle Service Management System - '分类列表' 存储型跨站脚本（XSS） 漏洞作者: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 中危 参考链接: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46071...

CVE-2026-86444

The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhi...

CVE-2025-70368

CVE-2025-70368 Stored Cross-Site Scripting XSS in Project Updates Feature...

CVE-2025-45407

CVE-2025-45407 CVE-2025-45407：DiscoveryNG v6.0.8 Hotfix 2 中的多个 XSS 漏洞。发现者：YallaSec 安全研究团队。CVE 编号：CVE-2025-45407。发布日期：2025 年 7 月...

Kentico-Xperience-before-13.0.178---XSS-POC

此存储库没有 README。...

CVE-2024-50803-Redaxo

CVE-2024-50804 Redaxo 的 mediapool 功能中的存储型 XSS 在 Redaxo 版本 5.18.0 中发现了一个存储型跨站脚本（XSS）漏洞，允许具有足够权限的攻击者通过 mediapool 功能上传恶意 SVG 文件。 发布了一篇分析文章 ：https://medium.com/@praison66/5d15a3cd054d 由 Praison 于 2024 年 9 月发现。 参考 ： https://vulners.com/cve/CVE-2024-50804...

CVE-2025-0133

描述： 这是一个针对 CVE-2025-0133 的 POC，仅适用于已启用 GlobalProtect 网关或门户的 PAN-OS 防火墙配置。 它检查从文件接收的多个 URL 上的问题，支持自定义线程。您还可以设置超时时间并将结果保存到文件中。 使用示例： MacBook-Wiseep-Dev:github root python3.9 CVE-2025-0133.py -h usage: CVE-2025-0133.py -h --file FILE --thread THREAD --timeout TIMEOUT --output OUTPUT Palo Alto...

CVE-2026-92214

A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-chat-canvas. Executing a manipulation can lead to cross site...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

CVE-2026-92214

CVE-2026-92214 affects a2ui-project a2ui versions up to 0.10.7 , specifically the file sanitizer-markdown-renderer-service.ts within the a2a-chat-canvas Angular component. The vulnerability is a Cross-Site Scripting (XSS) flaw in an unknown function of that service. A remote attacker with low pri...

CVE-2019-12543

CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 PurchaseRequest.do 中的 XSS 漏洞 信息描述：在 Zoho ManageEngine ServiceDesk Plus 9.3 中发现了一个问题。通过 PurchaseRequest.do 的 serviceRequestId 参数存在 XSS 漏洞。 作者：Tarantula 团队的 Concobe - VinCSS（Vingroup 成员） Payload...

CVE-2019-12542

CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 中的XSS漏洞（位于SearchN.do） 信息描述：在Zoho ManageEngine ServiceDesk Plus 9.3中发现了一个问题。通过SearchN.do的userConfigID参数存在XSS漏洞。 作者：Tarantula团队 - VinCSS（Vingroup成员）的Concobe Payload（利用载荷）...

CVE-2019-12949

CVE-2019-12949 从跨站脚本漏洞到 pfSense 2.4.4-p2 和 2.4.4-p3 的远程代码执行 信息描述： 在 pfSense 2.4.4-p2 和 2.4.4-p3 中，如果能够诱使已认证的管理员点击钓鱼页面上的按钮，攻击者可以通过 dingcommand.php 和 rrdfetchjson.php 将任意可执行代码上传到服务器。然后，远程攻击者可以在该服务器上以 root 权限运行任何命令。 研究员：The Tarantula Team 的 Enter，VinCSS（Vingroup 成员） PoC XSS...