CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2021-46069

CVE-2021-46069 Título del Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIO Referencias:...

CVE-2021-46078

CVE-2021-46078 Título del Exploit: Vehicle Service Management System - 'Múltiple' carga de archivos conduce a Cross-Site Scripting Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIO Referencias:...

CVE-2021-46068

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2021-46072

CVE-2021-46072 Título del Exploit: Vehicle Service Management System - 'Service List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIO Referencias:...

CVE-2021-46080

CVE-2021-46080 Título del exploit: Vehicle Service Management System - 'Múltiple' Cross-Site Request Forgery CSRF conduce a Cross Site Scripting Almacenado XSS Autor del exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM Referencias:...

pharmacy-sqli-CVE-2026-7392

Sistema de Ventas e Inventario de Farmacia 1.0 - Inyección SQL CVE-2026-7392 SourceCodester Sistema de Ventas e Inventario de Farmacia V1.0 versión PHP/MySQL pura CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier parámetro id Tipo : Inyección SQL CWE-89 CVSS 3.1 : 6.3 Medio Autor :...

CVE-2021-45745

CVE-2021-45745 Título del Exploit: Bludit 3.13.1 - Complemento About - Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss...

CVE-2021-45744

CVE-2021-45744 Título del Exploit: Bludit 3.13.1 - Cross Site Scripting Almacenado XSS en el Campo TAGS Autor del Exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

CVE-2021-46070

CVE-2021-46070 Título del exploit: Vehicle Service Management System - Cross Site Scripting XSS Almacenado en 'Service Requests' Autor del exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM Referencias:...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Carga-Arbitraria-de-Archivos Este repositorio revela una vulnerabilidad de seguridad descubierta en Motivian Content Management System v.41.0.0. CVE-2025-29093: Carga Arbitraria de Archivos Esta vulnerabilidad fue reportada al proveedor, conforme a las prácticas de divulgación...

Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting

Moodle Jitsi Meet 2.7 through 2.8.3 plugin contains a cross-site scripting vulnerability via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject JavaScript code to be run by the application. id: CVE-2021-26812 info: name: Moodle...

Gitea 1.22.0 - Cross-Site Scripting

Gitea 1.22.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts that get stored on the server and executed in the context of another user's session. id: CVE-2024-6886 info: name: Gitea 1.22.0 - Cross-Site Scripting...

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

CVE-2021-45744 Título del Exploit: Bludit 3.13.1 - Cross Site Scripting XSS Almacenado en el campo TAGS Autor del Exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ataques SSRF Resumen Información del sitio web del fabricante：https://maccms.pro Dirección de descarga del código fuente ： https://github.com/maccmspro/maccms10.git Versión afectada: V2021.1000.2000 2.Detalles de la vulnerabilidad...

CVE-2025-46181-XSS

CVE-2025-46181 - XSS reflejado en un sistema de reserva de citas en línea CVE-ID : CVE-2025-46181 Descubierto por : Shemkumar P shemkumar.github.io Tipo de vulnerabilidad : Cross-Site Scripting XSS reflejado Severidad : Media Estado : Divulgado, CVE asignado por MITRE ✨ Descripción Existe una...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Almacenado Resumen...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Cross-Site Scripting XSS Almacenado 📋 Resumen...

beyondtrust-cve-2026-1232

🔍 취약점 연구 소프트웨어 생태계의 실제 보안 사고를 다루는 심층 취약점 분석 글의 선별된 모음입니다. 각 항목은 전체 기술 분석, 개념 증명PoC, IOC 목록, 그리고 대응 지침을 포함합니다. 목적: 교육용 참고 자료 및 포트폴리오입니다. 모든 PoC 코드는 탐지 및 연구 목적으로만 사용됩니다. 색인 | 취약점| 유형| 심각도| 날짜| 상태 ---|---|---|---|---|--- 004| BeyondTrust Privilege Management for Windows CVE-2026-1232| 안티-템퍼 우회 / 권한 ...

CVE-2025-60012-POC

Solo para fines educativos y de investigación en seguridad. No lo utilice contra sistemas que no posea o para los que no tenga permiso explícito por escrito. →Descargo de responsabilidad completo CVE-2025-60012 — Acceso no autorizado a archivos en Apache Livy -yellow Resumen...