CVE-2024-42834

Exploit Title: INCOGNITO SAC STORED CROSS-SITE SCRIPTING XSS VULNERABILITY Date: 26 JULY 2024 Exploit Author: Etienne Supra Vendor Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Vendor has been informed and acknowledge the vulnerability...

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt file format in th...

CVE-2023-34599

CVE-2023-34599 Multiple Cross-Site Scripting XSS vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code. Proof of Concept Parameter allUsers http://gibbon.local/index.php?q=/modules/Timetable...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

caplets

Caplets bettercap's interactive sessions can be scripted with .cap files, or caplets, the following are a few basic examples, look at this repo for more. To install / update the caplets on your computer: git clone https://github.com/bettercap/caplets.git cd caplets sudo make install Or, from with...

https-nj.gov---CVE-2020-11023

https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

turbo-intruder

Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...

CVE-2024-41662

CVE-2024-41662 Markdown XSS leads to RCE in VNote version NOTE: The application properly validates some JavaScript payloads by performing output encoding in the app. However, it fails to validate in certain cases. 5. Further an attacker can achieve Remote Code execution using the following payloa...

XSSCon

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Commands: git clone https://github.com/menkrep1337/XSSCon chmod 755 -R XSSCon cd XSSCon python3 xsscon.py --help Usage Basic usage: python3 xsscon.py -u...

redis_exploit

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2020-16270

CVE-2020-16270 Suggested description : OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s...

XSS-Payloads

This repository does not have a README...

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Praeda

This file is used to list a few config items and recommendation. Also some basic Praeda syntax Required perl modules: LWP::Simple LWP::UserAgent HTML::TagParser URI::Fetch HTTP::Cookies IO::Socket HTML::TableExtract Getopt::Std Net::SSL Net::SNMP NetAddr::IP; Quick CPAN command to make this happe...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...