1237698 matches found
hackazon
Hackazon Hackazon es un sitio de prueba vulnerable gratuito que es una tienda en lΓnea construida con las mismas tecnologΓas utilizadas en las aplicaciones mΓ³viles y de cliente enriquecido actuales. Hackazon tiene una interfaz AJAX, flujos de trabajo estrictos y API RESTful utilizadas por una...
hackazon
Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in todayβs rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful APIβs used by a companion mobile app providing uniquely-effective...
CVE-2026-93367
The Visitors Traffic Real Time Statistics Pro plugin for WordPress (versions up to and including 11.22 ) is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) . The root cause is the lack of sanitization on the page_title parameter within the ahcpro_track_visitor AJAX action, which i...
CVE-2026-93367 Visitors Traffic Real Time Statistics Pro <= 11.22 - Unauthenticated Stored Cross-Site Scripting via ahcpro_track_visitor (page_title)
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the pagetitle parameter of the ahcprotrackvisitor AJAX action. The action is registered for logged-out callers...
ransomwatch
RansomWatch RansomWatch es una herramienta de monitoreo de sitios de filtraciΓ³n de ransomware. ExtraerΓ‘ todas las entradas de varios sitios de filtraciΓ³n de ransomware, almacenarΓ‘ los datos en una base de datos SQLite y enviarΓ‘ notificaciones a travΓ©s de Slack o Discord cuando aparezca una nueva...
CVE-2024-37383_PoC
Repositorio para practicar directamente la vulnerabilidad CVE-2024-37383. Informe de anΓ‘lisis: blog / pdf CVE-2024-37383 Detalle Nombre : Roundcube Webmail SVG Parsing XSS Objetivo : Roundcube Webmail v1.5.7 o v1.6.x manipulada en un correo electrΓ³nico, se ejecuta un script arbitrario en el...
CSPTPlayground
Client-Site Path Traversal Playground !Doyensec Research...
Centos Web Panel 0.9.8.480 - Local File Inclusion
Centos Web Panel version 0.9.8.480 suffers from local file inclusion vulnerabilities. Other vulnerabilities including cross-site scripting and remote code execution are also known to impact this version. id: CVE-2018-18323 info: name: Centos Web Panel 0.9.8.480 - Local File Inclusion author:...
twitter-server Cross-Site Scripting
twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala. id: CVE-2020-35774 info: name: twitter-server Cross-Site...
Zoho manageengine - Cross-Site Scripting
Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...
WordPress UserPro 4.9.32 - Cross-Site Scripting
WordPress UserPro 4.9.32 is vulnerable to reflected cross-site scripting because the Instagram PHP API v2 it relies on allows it via the example/success.php errordescription parameter. id: CVE-2019-14470 info: name: WordPress UserPro 4.9.32 - Cross-Site Scripting author: daffainfo severity: mediu...
CHIYU TCP/IP Converter - Cross-Site Scripting
CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...
xss-payload-list
xss-payload-list π― Cross Site Scripting XSS Vulnerability Payload List...
WBCE-CMS-Stored-XSS---Pages-Menu
WBCE CMS Stored XSS v1.6.1 Author: Sergio Description: WBCE CMS 1.6.1 is affected by a Cross-Site stored scripting XSS vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Intro Page parameter in the Pages menu. The payload will be executed on the main page...
CVE-2023-41080
vulnerable: http://localhost:8081//secret.html;@example.com Redirect to arbitrary web site in this case, https://example.com. patched: http://localhost:8082//secret.html;@example.com ref: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...
SUSE CVE-2019-7621
Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting XSS flaw in the coordinate and region map visualizations. An attacker with the ability to create coordinate map visualizations could create a malicious visualization. If another Kibana user views that visualization or a dashboa...
EUVD-2026-91067
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting XSS. This issue affects CAPEC-63: before 3.0b63...
PT-2026-104076
Name of the Vulnerable Software and Affected Versions Divi Membership versions prior to 2.3.1 Description An authentication bypass exists in the Divi Membership plugin for WordPress. The process paypal callback function, which is linked to the init action, processes a base64-encoded paypal param...
PT-2026-104154
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 5.122.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2026-104074
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the page title parameter of the ahcpro track visitor AJAX action. The action is registered for logged-out callers wp ajax...