jira-ssrf

jira-ssrf CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SS...

CVE-2021-39476

CVE-2021-39476 发现 PhoenixCart 1.0.8.0 中存在多个 XSS 漏洞 同一页面上的 2 个 XSS 漏洞 "编辑分类标题以用于 SEO：" "编辑分类描述" 链接：https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...

VulnLab

VulnLab Un laboratorio de vulnerabilidades web desarrollado por Yavuzlar. Logotipo Vulnerabilidades Inyección SQL Cross Site Scripting XSS Inyección de comandos Referencias directas a objetos no seguras IDOR Falsificación de petición en sitios cruzados CSRF Entidad externa XML XXE Deserialización...

cobaltstrike_swing_xss2rce

This repository does not have a README...

CVE-2023-2822-demo

CVE-2023-2822-demo Simple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822. Based on the writeup at https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb. root@kitploit: docker...

CVE-2024-48652

CVE-2024-48652 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field Steps to Reproduce: 1.Open the URL: http://127.0.0.1/admin/dashboard 2.Log in using admin credentials. 3.Navigate to the "Settings" section...

awesome-web-security

Awesome Web Security 🐶 Lista curada de materiales y recursos de Seguridad Web. No hace falta decir que la mayoría de los sitios web sufren de varios tipos de errores que eventualmente pueden llevar a vulnerabilidades. ¿Por qué ocurre esto con tanta frecuencia? Pueden intervenir muchos factores,...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...

XSSCon

Un potente escáner XSS hecho en Python 3.7 Instalación Requisitos: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests Python 3.7 Comandos: root@kitploit: git clone https://github.com/menkrep1337/XSSCon chmod 755 -R XSSCon cd XSSCon python3 xsscon.py --help...

Optiva-Framework

Optiva-Framework 🕵️ Web Application Scanner 💉 Author : Joker-Security dev-labs ✔️ Description : You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin panel search SQL injection by dork As...

CVE-2024-6536

Description This script is a PoC for CVE-2024-6536, where a XSS is possible in the Zephyr Project Manager plugin for Wordpress. It requires authentication and privileges as a project manager administrator. Usage root@kitploit: python3 CVE-2024-6536.py -u -p -w Example: python3 CVE-2024-6536.py -u...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

cve-2023-40000

cve-2023-40000 That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit. The CVE could be applied to all LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

CVE-2020-17453-PoC

CVE-2020-17453 WSO2 Management Console 5.10及之前版本存在XSS漏洞，可通过 carbon/admin/login.jsp 的 msgId 参数触发。 PoC（概念验证） root@kitploit: https://.com/carbon/admin/login.jsp?msgId=%27;alert1// 发现者 姓名：Jackson Henry Twitter：@JacksonHHax 姓名：Nicholas Young...

CVE-2024-29399

CVE-2024-29399 Vulnerability Details Overview In Savane v3.13 and prior, a lack of validation on uploaded files can allow for privilege escalation. Web servers configured according to the installation instructions are vulnerable to Cross-Site Scripting XSS. In misconfigured web servers this can...

jquery-cve-2022-31160

jQuery UI CVE-2022-31160 漏洞演示 本项目演示 jQuery UI Checkboxradio 组件刷新漏洞（CVE-2022-31160） ，该漏洞会在组件刷新操作期间进行 HTML 实体解码，从而可能导致跨站脚本（XSS）攻击。 🚨 安全警告 ⚠️ 本项目包含可用的 XSS 载荷，仅供教育和研究目的使用。 请勿在生产系统上使用 仅可在受控环境中使用 仅供安全研究和教育使用 📋 目录 漏洞概述 快速开始 项目结构 演示 技术细节 Docker 使用方法 安全分析 缓解措施 贡献 🔍 漏洞概述 CVE-2022-31160 详细信息 组件 ：jQuery UI...

CVE-2022-29455

CVE-2022-29455 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Vulnerable Version Example - https://www.youtube.com/watch?v=4qvOkSbhcE...

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

traxss

Traxss Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless Forks DEMO Background Traxss is a Hacktoberfest Project! If you are looking for a place to make contribute, please feel free. Traxss is an automated framework to scan URLs and webpages for XSS...

CVE-2019-8331

Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...