1244680 matches found
Exploite-CVE-2023-30212-Vulnerability
create a vulnerable Docker environment that is susceptible to CVE-2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...
hsecscan
hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...
CVE-2026-10289-XSS
Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS Vulnerability Details Field| Details ---|--- Title| Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS CVE ID| Pending Assignment Vendor| code-projects.org Vendor URL|...
CVE-2026-22610
Angular SVG Vulnerability Scanner CVE-2026-22610 Purpose: Scan Angular projects for potential XSS vulnerabilities in SVG Usage Run the script from the project root: Scan current folder node scan-angular-svg-vuln-final.js Scan a specific folder node scan-angular-svg-vuln-final.js /project1/src...
sobelow
Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...
CVE-2025-70368
CVE-2025-70368 Stored Cross-Site Scripting XSS in Project Updates Feature | Worklenz All in one project management tool for efficient teams ---|--- š Description Worklenz version 2.1.5 contains a Stored Cross-Site Scripting XSS vulnerability in the Project Updates feature. An attacker can submit ...
EUVD-2026-106892
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any consent step. Attackers mint an unauthenticated code, lure a logged-in user to that URL, then...
EUVD-2026-106896
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session,...
EUVD-2026-107012
SvelteKit @sveltejs/kit before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted without escaping into a tag. An attacker who can influence that untrusted value at prerender time can break out of the conten...
EUVD-2026-106999
WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist...
CSPTPlayground
Client-Site Path Traversal Playground !Doyensec Research...
CVE-2020-26733
CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...
CVE-2022-30507-PoC
Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...
CVE-2019-12542
CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SearchN.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. Author: Concobe of Tarantula Team - VinCSS a member of Vingroup...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation ā¢ Contributions ā¢ Discussion ā¢ Community ā¢ FAQs ā¢ Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
VulnLab
VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...
CVE-2025-53770
CVE-2025-53770 This is a multiple site scanner for CVE-2025-53770 Unauthenticated RCE Vulnerability. Other scanners/PoCs:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE Impact: Unauthenticated attackers can achieve remote...
cPanel-CVE-2023-29489
POC for cPanel CVE-2023-29489 XSS Payload...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...