1162538 matches found
XWiki - Cross-Site Scripting
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as:...
SquirrelMail 1.4.x - Folder Name Cross-Site Scripting
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php. id: CVE-2004-0519 info: name: SquirrelMail 1.4.x -...
Bitrix Component - Cross-Site Scripting
Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to 1 enumerate attachments on the server and 2 execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim ha...
Hostel < 1.1.5.3 - Cross-Site Scripting
The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2024-3753 info: name: Hostel 1.1.5.3 - Cross-Site Scriptin...
google-dorks-bug-bounty
Google Dorks per Bug Bounty Un elenco di Google Dorks per Bug Bounty, Sicurezza delle Applicazioni Web e Pentesting Strumento Live Ricerca ampia per dominio con ricerca negativa site:example.com -www -shop -share -ir -mfa Estensione PHP con parametri site:example.com ext:php inurl:? Endpoint API...
zeek
The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...
CVE-2024-42834
Titolo Exploit: VULNERABILITÀ DI CROSS-SITE SCRIPTING XSS MEMORIZZATA IN INCOGNITO SAC Data: 26 LUGLIO 2024 Autore Exploit: Etienne Supra Homepage del Venditore: https://www.incognito.com/products/service-activation-center/ Versione: 14.11 CVE: CVE-2024-42834 Il venditore è stato informato e ha...
RustScan
➡️ Discorddiscord | Guida all'installazionetoc-install | Guida all'utilizzousage-guide ⬅️ Veloce, intelligente, efficace. !Arch Linux packagebadge-1 !Built with Rustbadge-2 !GitHub All Releasesbadge-3 !Crates.iobadge-4 !Discordbadge-5 !Actionsbadge-6 🤔 Cos'è questo? !fastspeed-1 Il Modern Port...
CVE-2020-16270
CVE-2020-16270 Descrizione suggerita : OLIMPOKS con versioni precedenti alla 3.3.39 consente XSS in Auth/Admin ErrorMessage. Un attaccante remoto può utilizzare la vulnerabilità scoperta per iniettare payload JavaScript dannosi nei browser delle vittime nel contesto delle applicazioni vulnerabili...
CVEs
Elenco CVE CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...
sobelow
Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...
awesome-web-security
Awesome Web Security 🐶 Lista curata di materiali e risorse per la sicurezza Web. Inutile dire che la maggior parte dei siti web soffre di vari tipi di bug che possono eventualmente portare a vulnerabilità. Perché ciò accade così spesso? Possono esserci molti fattori coinvolti, tra cui...
CVE-2024-22909
CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Prova di Concetto PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md Prova di Concetto PoC : https://github.com/BurakSevben/CVE-2024-22909/blob/main/CVE-2024-22909.md...
ADB-Toolkit
!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...
AwesomeXSS
AwesomeXSS Questo repository è una raccolta di risorse XSS fantastiche. I contributi sono benvenuti e devono essere inviati tramite un issue. Contenuti fantastici Sfide Letture e Presentazioni Strumenti Mappe mentali DOM XSS Payload Polyglot Tag e gestori di eventi Rottura del contesto Contesto...
CVE-2026-62100
The KuteShop WordPress theme (versions
CVE-2026-62100 WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...
CVE-2026-62095 WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Biolife = 3.2.3 versions...