apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...

CVE-2025-68461

CVE-2025-68461 Scanner A C++ security scanner tool to detect Cross-Site Scripting XSS vulnerabilities in Roundcube Webmail installations. Impact Unauthorized access to user accounts Session hijacking Data exposure Unauthorized actions on behalf of users Affected Versions The scanner checks for th...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' Summary This POC uses an authentication bypass vulnerability chained with abuse of builtin scripting functionality to execute...

CVE-2026-105224

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...

Ghidrathon

Ghidrathon Ghidrathon is a Ghidra extension that adds Python 3 scripting capabilities to Ghidra. Why? Ghidra natively supports scripting in Java and Jython. Unfortunately, many open-source analysis tools, like capa, Unicorn Engine, angr, etc., are written in Python 3 making it difficult, and in...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0 Software Link:...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce Watch the video...

EUVD-2026-92110

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 URL. The value is rendered unescaped in YouPHPFlix2 templates and channel playlists, letting attackers break out of oncli...

CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...

CVE-2024-49379

Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...

CVE-2024-42009

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit Overview This Proof of Concept PoC demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting XSS vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Cross-Site Scripting via /client/manage/ourphpout.php Products Affected By CVE-2023-30212 : Vendor| Product| Version ---|---|--- ourphp| ourphp| 7.2.0 Docker Installation Guide : To install OURPHP alertxss" Steps to Reproduce the issue: After completing the setup of the docke...

CVE-2023-50132

CVE-2023-50132 제안된 설명 Sourcecodester School Visitor Log e-book v1.0은는 크로스 사이트 스크립팅XSS에 취약합니다. 추가 정보 유튜브 링크: https://youtu.be/W7Oen8rs64 취약점 유형 크로스 사이트 스크립팅XSS 제품 공급업체 https://www.sourcecodester.com/ 영향받는 제품 코드 베이스...

CVE-2024-40512

CVE-2024-40512 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMReporting.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMReporting.asmx function. Vulnerable Product...

CVE-2023-46998

Cross Site Scripting in Bootbox.js v.3.2 thru 6.0 allows a remote attacker to to inject HTML code and execute arbitrary JavaScript. Summary Vendor: BootBox Product: bootbox.js Affected versions: 3.2 to 6.0 CodeName: Venga-Que-Si-Es-Pa-Eso Vulnerability Type: Improper Neutralization of Input Durin...

CVE-2023-36159

CVE-2023-36159 Cross Site Scripting XSS vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page...

Stored-xss

Stored-xss CVE-2023-41575 - Stored XSS...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Apache Tomcat XSS Vulnerability in Generated JSPs🚨🚨 Overview CVE-2024-52318 is a crosssite scripting XSS vulnerability in Apache Tomcat, which arises from improperly released resources in generated JavaServer Pages JSPs. This issue, introduced by a prior...

CVE-2024-25411

CVE-2024-25411 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php Vulnerability Type : Cross Site Scripting XSS Vendor of Product :...