awesome-ctf

Awesome CTF A curated list of Capture The Flag CTF frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place. Contributing Please take a quick look at the contribution guidelines first...

CVE-2024-37383-POC

CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Introduction This repository contains a proof of concept for the XSS vulnerability in roundcube: CVE-2024-37383. More information about this vulnerability can be found: here Steps Start Roundcube If you don't have an instance of roundcube...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...

CVE-2024-34312

CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...

CVE-2024-22890

CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22890/blob/main/CVE-2024-22890.md...

Vulnerable-Docker--CVE-2023-30212-

Vulnerable-Docker-CVE-2023-30212- This contains the necessary directories and Dockerfile to replicate A vulnerabality in OURPHP that has a XSS Vulnerability CVE-2023-30212. Creating a Vulnerable Docker Environment CVE-2023-30212 PRE-REQUISITS Download Docker sudo apt install -y docker.io Follow...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-11611...

CVE-2020-13965

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail A Cross-Site scripting XSS vulnerability exists in Roundcube versions before 1.4.5 and 1.3.12. By leveraging the parsing of "text/xml" attachment, an attacker can bypass the Roundcube script filter and execute...

CVE-2023-30943

CVE-2023-30943Moodle self-xss Disclaimer All content is provided "as is", without any warranties, express or implied. The authors shall not be liable for any damages, direct or indirect, arising from the use of the information or software associated with this repository. All material, including...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

CVE-2024-51026_Overview

CVE-2024-51026 - Cross Site Scripting XSS Vulnerability in NetAdmin IAM Description The NetAdmin IAM system version 4.0.30319 presents a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload in the Content= field. Any...

CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

-CVE-2022-48150

-CVE-2022-48150 I Found the reflected xss vulnerability in shopware 5 .for more details check my poc video...

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user. Reffer to: https://github.com/G37SYS73M/AdvisoryG37SYS73M/blob/main/CVE-2022-46087/poc.md...

CVE-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4 A Concrete CMS admin in versions below 9 did not have to provide their password when changing another user's password. In combination with CVE-2021-28145 "Concrete CMS formerly concrete5 before 8.5.5 allows remote...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

CVE-2026-103342 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2022-31299

CVE-2022-31299 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31299 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 XSS to RCE Exploits Overview These scripts exploit an XSS Cross-Site Scripting vulnerability in WonderCMS 4.3.2 to achieve Remote Code Execution RCE. The XSS payload, when triggered by the admin, automatically installs a reverse shell on the target server by leveraging a crafted...