FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2025-51401

Exploit Title: LiveHelperChat 4. Save the changes. 5. Initiate a chat with a visitor. 6. Transfer the chat to another operator — the XSS payload executes in the receiving operator’s chat interface...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

CVE-2025-51397

Exploit Title: LiveHelperChat 4. Save the changes. 5. This payload is stored and later executed when an admin or higher-...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...

CVE-2024-50962

Cross-Site Scripting XSS in DonWeb Ferozo Webmail CVE-2024-50962 Description A Cross-Site Scripting XSS vulnerability in Ferozo Webmail v1.1 allows attackers to execute arbitrary scripts via the Identities and Automatic Responses components. This vulnerability can be used to hijack user sessions,...

awesome-ctf

Awesome CTF A curated list of Capture The Flag CTF frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place. Contributing Please take a quick look at the contribution guidelines first...

Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS-

Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS DESCRIPTION Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting XSS LIMBAS http://www.limbas.org/ - 4.3.36.1319 PROOF OF CONCEMT UPDATE/up20.php the page reflexed with the XSS code EXAMPLE PAYLOAD 1'"&% DETAILS XSS Cross-site...

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

CVE-2024-39248

Exploit Title: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php A cross-site scripting XSS vulnerability in SimpCMS v0.1 allows...

CVE-2021-26832

CVE-2021-26832 Suggested description Cross Site Scripting XSS at the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Vulnerability Type...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - Cross-site scripting XSS vulnerabilities in attendancereport Description : Cross Site Scripting vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the "page...

CVE-2022-43117

Suggested description Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters. Additional Information Proof Of Concept:...

CVE-2024-6536

Description This script is a PoC for CVE-2024-6536, where a XSS is possible in the Zephyr Project Manager plugin for Wordpress. It requires authentication and privileges as a project manager administrator. Usage python3 CVE-2024-6536.py -u -p -w Example: python3 CVE-2024-6536.py -u user -p user -...

CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD Description Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script...

CVE-2024-46278-teedy_1.11_account-takeover

【CVE-2024-46278】teedy1.11account-takeover 【Teedy 1.11】account takeover via XSS Detail There is a vulnerability that causes XSS when downloading files. XSS vulnerability could allow a Teedy administrator to rob an account with a few clicks. This vulnerability is marked as CVE-2024-46278:...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

-CVE-2022-48150

-CVE-2022-48150 I Found the reflected xss vulnerability in shopware 5 .for more details check my poc video...

CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Exploit Title: Rafed CMS Website v1.44 - Cross Site Scripting XSS Date: 2024-03-12 CVE: CVE-2024-55060 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.rafed-system.org/ Software Link: N/A Version: 1.44 Tested on...