Lucene search
+L

9 matches found

Kitploit
Kitploit
•added 2026/10/06 1:47 a.m.•18 views

xssor2

XSS'OR XSS'OR - Hack with JavaScript. ONLINE You can have a try: https://xssor.io and http://xssor.io/ It contains three major modules: Encode/Decode, Codz, Probe. INSTALL Python 3 with Django 3.0. or Python 2 with Django 1.11. git clone https://github.com/evilcos/xssor2 or download directly cd...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/05 3:15 p.m.•16 views

lblfixer_cve_2023_28447

LabelGrup Networks, socio oficial de PrestaShop Módulo para PrestaShop 1.7.X para corregir la vulnerabilidad CVE-2023-28447 Smarty JavaScript XSS Para más información, consulta los siguientes enlaces: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-28447 GitHub:...

7.1CVSS7AI score0.01025EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/05 12:30 a.m.•10 views

SUSE CVE-2026-65912

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...

6.1CVSS5.5AI score0.003EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-15672

Malware in sbrugna...

4.8CVSS5.7AI score0.00786EPSS
SaveExploits1References2
OSV
OSV
•added 2025/06/21 2:15 a.m.•20 views

CVE-2025-52552 FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS

FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to...

5.5CVSS7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/21 9:25 a.m.•26 views

CVE-2025-1024

A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting XSS in the EditEventAttendees.php page. This requires Administration privileges and affects the EID parameter. The flaw allows an attacker to...

8.4CVSS6.1AI score0.0029EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2021/02/17 12:00 a.m.•53 views

Pi-hole Web Interface < 5.4 Multiple Vulnerabilities

The Pi-hole Web Interface previously AdminLTE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.8CVSS5.8AI score0.0114EPSS
SaveExploits2References3
Debian CVE
Debian CVE
•added 2020/03/19 5:30 p.m.•85 views

CVE-2020-5267

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2...

4.8CVSS6.5AI score0.01525EPSS
SaveExploits1
xssed
xssed
•added 2011/04/27 12:00 a.m.•30 views

Unfixed XSS vulnerability at www.joereiss.net

Security researcher Kn0t, has submitted on 27/04/2011 a cross-site-scripting XSS vulnerability affecting www.joereiss.net, which at the time of submission ranked 2923685 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

6.6AI score
SaveExploits0References1
Rows per page
Query Builder