CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC di DNN Insufficient Access Control - Image Upload permette la sovrascrittura dei contenuti del sito Sono un uomo semplice, vedo cvss:10/10 e ci vado xD Ho visto questa nuova CVE CVE-2025-64095 DNN Insufficient Access Control - Image...

CVE-2026-6176

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...

CVE-2026-5953

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

Cross-Site Scripting XSS Armazenado Não Autenticado em genai/evalsvisualization.py do Google Cloud Vertex AI SDK google-cloud-aiplatform nas versões de 1.98.0 até mas não incluindo 1.131.0 - github.com/googleapis/python-aiplatform Autor: Joshua Provoste Pesquisador e Desenvolvedor de N-day...

CVE-2026-47761

👋 नमस्ते ! सुरक्षा अनुसंधान 🛡️ CVE-2026-47761 – सुरक्षा शोधकर्ता प्रकार : Stored Cross-Site Scripting XSS उत्पाद : TinyMCE संदर्भ : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w सम्मान सूची CVE-2026-47761...

CVE-2026-27621

CVE-2026-27621: TypiCMS Core presenta Cross-Site Scripting XSS Memorizzato tramite Caricamento File SVG Panoramica...

CVE-2026-24415

CVE-2026-24415: OpenSTAManager Affected by XSS in modificaiva.php via righe parameter Panoramica...

CVE-2026-4378 Stored XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this...

Trickster-HTB

Rapporto di sfruttamento di Trickster Informazioni su Trickster Trickster è una macchina Linux di difficoltà media che presenta multiple vulnerabilità in diversi servizi. Questo report descrive il processo di sfruttamento di queste vulnerabilità per ottenere il pieno compromesso del sistema...

CVE-2023-33829-POC

CVE-2023-33829-POC SCM Manager XSS...

CVE-2026-5953 Reflected XSS in Ceviz Informatics's Web Design

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 root@kitploit: Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References...

CVE-2024-49379

Proof of Concept PoC per CVE-2024-49379 Questo repository contiene un Proof of Concept PoC basato su Python per una vulnerabilità critica identificata in UmbrelOS. La vulnerabilità consente Cross-Site Scripting XSS, che può essere elevata a Remote Code Execution RCE in condizioni specifiche...

CVE-2025-4123

Exploit Grafana CVE-2025-4123 ID CVE: CVE-2025-4123 Gravità: Alta Impatto: Server-Side Request Forgery SSRF, Cross-Site Scripting Versioni interessate: Grafana 11.2, Grafana 11.3, Grafana 11.4, Grafana 11.5, Grafana 11.6, Grafana 12.0 Writeup completo Writeup root@kitploit: ❯ sudo python server.p...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ Cross-Site Scripting Riferimento: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Punteggio Base: 6.1 Gravità: Media Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

CVE-2026-54477

CVE-2026-54477: Im Admin-Panel fehlende Security-Header Clickjacking / XSS Advisory Feld| Wert ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Mittel Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

CVE-2025-65881

CVE-2025-65881 Il progetto Zoo Management System v1.00 è vulnerabile a Cross-site scripting XSS su /zms/classes/Login.php?f=login a causa di: 1. Content-type non valido delle risposte JSON su /zms/classes/Login.php?f=login 2. Input utente non sanificato nelle risposte Consentendo a attaccanti non...

CVE-2018-25031

POC di Cross-Site Scripting nello Swagger UI: CVE-2018-25031 utilizzando Selenium in Python Questo repository contiene uno script Python che dimostra una prova di concetto POC di una vulnerabilità di Cross-Site Scripting XSS nello Swagger UI, utilizzando la libreria Selenium. L'obiettivo di quest...

CVE-2023-32961

CVE-2023-32961 Questa repository riguarda la vulnerabilità XSS nel plugin Wordpress Zotpress. Dettagli del componente Nome del componente Zotpress Versione vulnerabile ≤ 7.3.3 Slug del componente zotpress Link del componente https://wordpress.org/plugins/zotpress/ Prerequisito Non autenticato...

CVE-2023-29439

CVE-2023-29439 Dieses Repository behandelt eine XSS-Sicherheitslücke im WordPress-Foogallery-Plugin. Details zur Schwachstelle Beschreibung In Foogallery 2.2.35 und früher ist die Funktion foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php anfällig für...