CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat Examples XSS Exploit...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...

CVE-2023-46974

CVE-2023-46974 POC Description Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

CVE-2022-30507-PoC

Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...

CVE-2025-45407

CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...

CVE-2017-9934

CVE-2017-9934 I am the reporter of this exploit, under name: Envo Joomla 1.7.3 - 3.7.2 CSRF exploit PoC This vulnerability works due to Joomla versions 1.7.3 to 3.7.2 not sanitizing base64 input. Headers: root@kitploit: POST...

Kentico-Xperience-before-13.0.178---XSS-POC

This repository does not have a README...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Download the environment, unzip it, and enter root@kitploit: unzip cve-2024-4367-lab cd cve-2024-4367-lab Environment startup command root@kitploit: mkdir upload chmod 777 upload docker-compose up -d...

cPanel-CVE-2023-29489

POC para cPanel CVE-2023-29489 XSS Payload...

CVE-2024-21338-1

CVE-2024-21338 Este PoC foi desenvolvido para o concurso XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

hackazon

Hackazon Hackazon es un sitio de prueba vulnerable gratuito que es una tienda en línea construida con las mismas tecnologías utilizadas en las aplicaciones móviles y de cliente enriquecido actuales. Hackazon tiene una interfaz AJAX, flujos de trabajo estrictos y API RESTful utilizadas por una...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2025-0133

...

CVE-2026-82090

Pocket for Android (versions through 8.33.0.0 ) is affected by a Cross-Site Scripting (XSS) vulnerability rated CVSS 4.0 9.2 (CRITICAL) . The root cause is that the "Save to Pocket" feature injects external HTML into the DOM, allowing injected JavaScript to alter the application state via native ...

CVE-2026-30691

CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allo...

CVE-2024-34312

CVE-2024-34312 الوصف تم اكتشاف أن المختبر الافتراضي للبرمجة لـ Moodle حتى الإصدار v4.2.3 يحتوي على ثغرة Cross-Site Scripting XSS عبر مكوّن IDE. تفاصيل إضافية يتصل المتصفح مباشرةً بويب سوكيت websocket يعمل على خادم العزل. عبر هذا الويب سوكيت، يمكن لخادم العزل إرسال رسائل مباشرةً إلى المتصفح. يتم...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...