1162647 matches found
cve_2022_0492
Shell Script Template A modern Bash script template with colorized output formatting and utility functions for creating professional command-line tools. Features 🎨 Colorized Output : Pre-defined color schemes and formatting functions 📝 Standardized Messages : Consistent info, success, warning, an...
Trickster-HTB
Informe de Explotación de Trickster Acerca de Trickster Trickster es una máquina Linux de dificultad media que presenta múltiples vulnerabilidades en diferentes servicios. Este informe describe el proceso de explotación de estas vulnerabilidades para lograr un compromiso completo del sistema. Pas...
Security Bulletin: IBM DataPower Gateway affected by cross-site scripting (CVE-2026-14990)
Summary IBM DataPower Gateway affected by cross-site scripting CVE-2026-14990 Vulnerability Details CVEID:CVE-2026-14990 DESCRIPTION: IBM DataPower Gateway is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thu...
CVE-2025-65881
CVE-2025-65881 The Project Zoo Management System v1.00 is vulnerable to Cross-site scripting XSS on /zms/classes/Login.php?f=login due to: 1. Invalid Content-type of JSON Responses on /zms/classes/Login.php?f=login 2. Unsanitized User Input in Responses Allowing unauthenticated attackers to injec...
CVE-2023-29439
CVE-2023-29439 This repository is about XSS vulnerability in Wordpress Foogallery Plugin. Vulenerability details Description In Foogallery 2.2.35 and earlier, the function foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php is vulnerable to XSS attack...
CVE-2025-56515
CVE-2025-56515 Cross-Site Scripting XSS Vulnerability in Fiora Chat Application CVE-2025-56515: Cross-Site Scripting XSS Vulnerability in Fiora Chat Application Vulnerability Overview CVE ID : CVE-2025-56515 Vulnerability Type : Cross-Site Scripting XSS Attack Type : Remote Impact : Code Executio...
CVE-2025-56514
CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514 , affects the Fiora chat application version 1.0.0. This vulnerability allows an authenticated user to execute arbitrary JavaScript in t...
CVE-2024-40508
CVE-2024-40508 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMConference.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMConference.asmx function. Vulnerable Product...
EUVD-2026-95016
League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone script or iframe line followed by a block supplying...
Wordpress_xss-CVE-2022-29455
This repository does not have a README...
CVE-2026-13258
IBM DataPower Gateway is vulnerable to a cross-site scripting (XSS) flaw (CWE-79) in its Web UI. This vulnerability allows an authenticated user to embed arbitrary JavaScript code, which can alter functionality and potentially lead to credentials disclosure within a trusted session. Affected vers...
CVE-2026-13258 IBM DataPower Gateway Cross-Site Scripting
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended...
EUVD-2026-95000
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended...
CVE-2025-63708
CVE-2025-63708 CVE ID: CVE-2025-63708 Assigned: 11-12-2025 Problem Type: CWE-79 Cross-Site Scripting Affected Product: “AI Font Matcher” posted 2025-10-10, nid=18425 Product page: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html...
CVE-2025-60654
CVE-2025-60654 - Stored Cross-Site Scripting XSS in Ad Description | ---|--- Researchers| DotAdrien Severity| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag Description The ad description field is vulnerable to stored Cross-Site Scripting XSS. Although some security...
EUVD-2026-94986
IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2026-14990
The IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 are vulnerable to a Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an unauthenticated user to embed arbitrary JavaScript code into the Web UI, which can alter intended functionality and potentially lead to the disc...
CVE-2025-49844-RediShell-AI-made-Revshell
CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...