CVE-2023-0297

CVE-2023-0297 pyload 0.5.0b3.dev31 之前的版本中存在RCE漏洞。 免责声明：此脚本可能导致对远程系统的未授权访问或控制；仅在获得系统所有者明确许可后方可使用。...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CVE-2022-35914

CVE-2022-35914 PoC Referencias https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Créditos a Sébastien Copin por el PoC que adapté aquí Consulta mi análisis completo aquí: https://link.medium.com/tBwDlpQl3Ib Uso root@kitploit...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 远程命令执行脚本 更多脚本文件另参：https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-10204 Nexus...

CVE-2024-39248

漏洞标题: SimpCMS v0.1 - 跨站脚本攻击 XSS CVE: CVE-2024-39248 漏洞利用作者: Jason Jacobs 0xjasonjacobs - Twitter 供应商主页: https://sourceforge.net/projects/simpcms/ 脆弱端点: /SimpCMS/admin.php SimpCMS v0.1 中存在一个跨站脚本 XSS 漏洞，攻击者可以通过在 /admin.php 的标题字段中注入构造的有效载荷，执行任意 Web 脚本或 HTML。 针对 SourceForge 上最新 SimpCMS 版本更新的 cURL 命令参...

CVE-2023-38831

CVE-2023-38831 Exploit - Generador de Archivos Cebo y Cambio Resumen Este script de Python está diseñado para generar un archivo de tipo "bait and switch" cebo y cambio. Está destinado únicamente a fines educativos y de hacking ético. Asegúrate de tener los permisos necesarios antes de utilizar...

CVE-2023-33977

CVE-2023-33977 kiwitcms/kiwi 中通过 SVG 上传导致的存储型 XSS - 作者：M Nadeem Qazi 描述 本仓库针对在 kiwitcms/kiwi 应用中发现并被分配了 CVE-2023-33977 标识符的存储型 XSS 漏洞进行了说明。该漏洞允许通过 SVG 文件上传执行恶意脚本。当上传包含恶意载荷的 SVG 文件时，脚本会在受害者浏览器的上下文中执行，可能导致数据窃取、账户失陷以及恶意软件的传播。 概念验证 有关此漏洞的详细概念验证可参阅以下视频： 影响 该漏洞影响重大，对 kiwitcms/kiwi...

CVE-2022-32132

针对 osTicket 的 CVE-2022-32132 | 支持工单系统 反射型 XSS： root@kitploit: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

CVE-2024-22120-RCE

CVE-2024-22120 Kit de herramientas Versión/es afectadas root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Crédito https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premisa un usuario de...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

CVE-2025-25612

CVE-2025-25612: Switch FS S3150-8T2F Vulnerabilidad de Cross Site Scripting XSS Almacenado CVE-2025-25612 FS Inc S3150-8T2F anterior a la versión S3150-8T2F2.2.0D135103 es vulnerable a Cross Site Scripting XSS en la funcionalidad de Configuración de Rango de Tiempo de la interfaz de administració...

CVE-2023-38831-winrar-exploit

Generador de exploits CVE-2023-38831 para WinRAR Prueba rápida del PoC Genera el PoC por defecto para la prueba root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Personalizado 1. Coloca el archivo señuelo bait y el...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - "/management/class" 上 “name” 字段/参数中的跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 的 “/management/class” 组件中存在一个跨站脚本（XSS）漏洞，攻击者可通过向 name 参数注入特制负载来执行任意 Web 脚本或 HTML。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：20...

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

CVE-2021-36747

CVE-2021-36747 Blackboard Learn hasta la versión 9.1 permite XSS por parte de un usuario autenticado a través del formulario Feedback to Learner. Descubierto: 11 de mayo de 2018 El equipo de seguridad de Blackboard ha sido notificado de este problema. Reconocieron la vulnerabilidad el 14 de mayo ...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "name" en "/management/settings" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "/management/settings" de School Fees Management System v1.0 permite ...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "cname" en "newclass" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "newclass" de School Fees Management System v1.0 permite a los atacantes ejecutar...

shlol

SHLOL 这是一个可通过快捷键触发的菜单，用于为你执行基础操作 非常易于使用 即时创建监听器 无需复制粘贴 选择类型、IP 和端口即可完成！ 轻松运行远程脚本 反向 Shell 生成器 https://user-images.githubusercontent.com/35298550/119257747-47abd500-bbcf-11eb-934e-29ec617b9435.mp4 轻松提供脚本并远程运行...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...