WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting

WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php. id: CVE-2017-17059 info: name: WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress...

Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. id: CVE-2017-18556 info: name: Google Analytics by BestWebSoft 1.7.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-analytics plugin before 1.7.1 for WordPress has...

Exploit-Medium-CVE-2021-41184

Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS nell'opzione of dell'utilità .position 1. jQuery ui versione v1.12.1 vulnerabile 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Prova di...

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 Iniezione SQL SourceCodester Pharmacy Sales and Inventory System V1.0 versione in puro PHP/MySQL CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier parametro id Tipo : Iniezione SQL CWE-89 CVSS 3.1 : 6.3 Medio Autore : oretnom23...

CVE-2021-46070

CVE-2021-46070 Titolo dell'exploit: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Caricamento-Arbitrario-di-File Questo repository rivela una vulnerabilità di sicurezza scoperta in Motivian Content Management System v.41.0.0. CVE-2025-29093: Caricamento Arbitrario di File Questa vulnerabilità è stata segnalata al venditore secondo le pratiche di divulgazione...

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

CVE-2021-45744 Exploit-Titel: Bludit 3.13.1 - Gespeichertes Cross-Site-Scripting XSS im TAGS-Feld Exploit-Autor: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM Referenzen: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-4574...

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Ausgesetzte Ausführung eines Kubernetes-CronJob durch Zeitmanipulation Programmcode YAML + Python-Exploit root@kitploit: cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec: schedule: "0 2 ...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Esposizione di informazioni sensibili tramite file di log root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ Cross-Site Scripting Riferimento: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Punteggio Base: 6.1 Gravità: Media Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

CVE-2025-0133

Scanner di vulnerabilità CVE-2025-0133 Uno strumento di scansione automatizzato basato su Bash per rilevare la vulnerabilità XSS riflesso CVE-2025-0133 in Palo Alto GlobalProtect Gateway & Portal utilizzando nuclei e shodanx. Autore : Data : 2025-06-23 Gravità : Media ID CVE : CVE-2025-0133 Tipo ...

CVE-2026-34835-Black-box-Analysis

Questo repository fornisce un'analisi di sicurezza black-box di CVE-2026-34835 dal punto di vista di un penetration tester esterno. L'obiettivo non è fare reverse engineering della vulnerabilità, ma documentare come un valutatore di sicurezza possa identificare, validare e valutarne l'impatto...

CVE-2026-29115

CVE-2026-29115 — Dahua Denial of Service remoto autenticato Tipo di advisory: Divulgazione di sicurezza coordinata dal venditore ID CVE: CVE-2026-29115 Venditore: Dahua Technology Pubblicato: 2026-06-10T06:08:21 UTC Ultima modifica: 2026-06-10T06:08:21 UTC Fonte: Dahua Product Security Incident P...

CVE-2025-60012-POC

Solo per scopi educativi e di ricerca sulla sicurezza. Non utilizzare contro sistemi che non possiedi o per i quali non hai esplicita autorizzazione scritta al test. →Disclaimer completo CVE-2025-60012 — Accesso non autorizzato ai file di Apache Livy -yellow Panoramica...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Titolo dell'exploit: Vehicle Service Management System - Cross Site Scripting XSS Memorizzato in 'MyAccount' Autore dell'exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titolo dell'exploit: Vehicle Service Management System - Caricamento 'multiplo' di file porta a Cross-Site Scripting persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 Título do Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting Armazenado XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MÉDIO Referências:...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Cross-Site Scripting XSS persistente 📋 Panoramica...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2026-25594

CVE-2026-25594 — Stored XSS über den Familiennamen in InvoicePlane 1.7.0 Schwachstelle: Stored Cross-Site Scripting XSS über das Feld „Familienname“ Produkt: InvoicePlane Betroffene Version: 1.7.0 und vermutlich frühere Versionen Schweregrad: Mittel CVSS 3.1-Score: 4.8...