Lucene search
+L

649 matches found

Kitploit
Kitploit
added 2026/09/14 10:20 a.m.880 views

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/14 7:46 a.m.8 views

owasp-java-encoder

OWASP Java Encoder Project Contextual Output Encoding is a computer programming technique necessary to stop Cross-Site Scripting. This project is a Java 1.8+ simple-to-use drop-in high-performance encoder class with little baggage. For more detailed documentation on the OWASP Java Encoder please...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/14 7:17 a.m.9 views

CVE-2026-37196

CVE-2026-37196 – Stored Cross-Site Scripting XSS in nirix traq v3.9.0 Overview A Stored Cross-Site Scripting XSS vulnerability exists in nirix traq v3.9.0 , where user-supplied input in the ticket description field is improperly sanitized before being rendered in the application interface. This...

5.8AI score
SaveExploits1
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.12 views

YesWiki Archived Revision - Cross-Site Scripting

YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append an XSS payload after a valid revision timestamp. id: CVE-2026-52773 info: name: YesWiki...

6.1CVSS5.8AI score0.00478EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.108 views

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

6.1CVSS6.3AI score0.01107EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.82 views

SuperWebMailer - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 that allows keepalive.php XSS via a GET parameter. id: CVE-2023-38194 info: name: SuperWebMailer - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 that allows...

6.1CVSS6.3AI score0.01131EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.59 views

EyouCms v1.6.2 - Cross-Site Scripting

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet. id: CVE-2023-41597 info: name: EyouCms v1.6.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: | EyouCms v1.6.2 was discovered to...

6.1CVSS6.1AI score0.01224EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 8:16 p.m.13 views

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 es una vulnerabilidad de Cross-Site Scripting Almacenado Stored XSS que afecta a Mautic 7 versiones 7.0.0 a 7.1.1. La vulnerabilidad existe en el componente Project Selector, donde los nombres de proyecto devueltos a través de una solicitud AJAX se insertan en la págin...

5.4CVSS5.9AI score0.00173EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:52 p.m.6 views

CVE-2025-52097

CVE-2025-52097 – Reflected XSS in InstantForum.NET v4.1.4 This repository contains the public advisory, proof of concept, and supporting materials for CVE-2025-52097 , a reflected cross-site scripting XSS vulnerability identified in InstantForum.NET v4.1.4. Summary Product: InstantForum.NET v4.1....

5.8AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 1:40 p.m.5 views

CVE-2025-25461

📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is...

5.4CVSS5.9AI score0.00507EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/11 6:10 a.m.8 views

WSO2-2021-1261

WSO2-2021-1261: Multiple Cross-Site Scripting in WSO2 ESB Due to improper output encoding, multiple Cross Site Scripting XSS attacks have been identified in WSO2 ESB. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 10:58 p.m.7 views

cve-2025-31651

CVE-2025-36701 — Apache Tomcat - Rewrite rule bypass Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-02-28 Affected Vendor: Apache Affected Product: Tomcat 9.0.x / 10.1.x / 11.0.x Severity: Critical / High CWE: CWE-116 Status: Under Review / Fixed / Public ✅ / Private...

9.8CVSS7.3AI score0.04047EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 1:39 a.m.8 views

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Description A reflected cross-site scripting XSS vulnerability exists in /dashboard/settings.php in Bank Management System in Web 1.0. The vulnerability occurs due to improper sanitization of user-supplied input in the msg GET parameter. An attacker can craft a...

5.9AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.8 views

CVE-2026-87550

Improper encoding or escaping of output in CSS in Google Chrome prior...

4.3CVSS0.00242EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 2:34 a.m.9 views

CVE-2025-65300

CVE-2025-65300 Description CVE-2025-65300: Stored Cross-Site Scripting XSS Vulnerability in Coohom SaaS Platform Disclosure Date: 2025-10-28 Last Updated: 2025-10-28 Reporter: Phisit Pupiw Vendor: Coohom CWE: CWE-79 – Cross-Site Scripting Summary A stored Cross-Site Scripting XSS vulnerability wa...

5.4CVSS5.8AI score0.00199EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 1:22 a.m.7 views

CVE-2025-63588

CVE-2025-63588 Reflected Cross-Site Scripting XSS in CMSimpleXH cmsimplexh path handling Estimated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Medium Assigned CVE: CVE-2025-63588 Products: CMSimpleXH - 1.8 Vendor: CMSimpleXH - https://www.cmsimple-xh.org/ Summary A reflected Cross-Site...

7.1CVSS5.9AI score0.00335EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/07 10:30 p.m.8 views

EUVD-2026-72538

Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...

6.3CVSS6AI score0.00378EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 7:24 p.m.23 views

CVE-2026-76798

The MongoSQL Transition Readiness Tool (part of MongoDB's SQL/BI Connector stack) writes query text and user names from BI Connector log files into its generated HTML reports without encoding them for the HTML output context. An attacker with low privileges who can issue queries through the BI Co...

6.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/28 7:24 p.m.51 views

CVE-2026-76798 MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

6.9CVSS0.00204EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/08/28 7:24 p.m.12 views

MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

6.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder