evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

CVE-2015-9251

CVE-2015-9251 [email protected] PoC for CVE-2015-9251 jQuery before 3.0.0. CVE-2015-9251 - PoC Exploit This repository contains a Proof of Concept PoC for the vulnerability CVE-2015-9251 in the jQuery library. The vulnerability allows a Cross-Site Scripting XSS attack through unsanitized JSO...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

CVE-2025-48461

CVE-2025-48461 Predictable session cookies that can be bruteforced to gain unauthorized access to Advantech WISE portal Summary During examination of Advantech WISE-4060 web portal, I have discovered that the session cookies used to authenticate to the web portal follows the pattern 60D01EXXXXX...

Flask-Unsign

Flask Unsign Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys. For the standalone wordlist component, please visit the flask-unsign-wordlist repository. Requirements Python 3.6+ Installation To install the application, simply...

Kener - Authentication Bypass

Kener 3.0.0 before 4.1.10 falls back to the hardcoded JWT secret "DUMMYSECRET" when the KENERSECRETKEY environment variable is unset or empty. An unauthenticated attacker can forge session cookies and password-reset tokens signed with that key. A forged password-reset token accepted by POST...

CVE-2023-48084

CVE-2023-48084 Fixes broken syntax in the POC, primarily incorrect import and incorrect referral to API functions. automates the APIToken retrieval, stores the token as a variable and pipes into the fixed POC. https://github.com/Hamibubu/CVE-2023-48084 If for some reason this does not work,...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

CVE-2026-126476

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest endpoint, which echoes the searchMode POST parameter unencoded into a single-quoted onClick attribute. Attackers can induce an authenticated user to submit a single-quote payload ...

CVE-2026-126474

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the ACL module that allows attackers to execute JavaScript in authenticated sessions via the moduleid parameter. Attackers can deliver crafted acl/index or acl/acl links that inject unencoded input into inline script...

CVE-2026-126475

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by injecting payloads into the searchEleNo POST parameter of the application/index/search endpoint. Attackers can break out of unencoded HTML attributes in...

CVE-2026-126475

OpenEMR versions prior to 8.5.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the application/index/search endpoint. The root cause is the lack of proper encoding for the searchEleNo POST parameter, allowing authenticated attackers to break out of unencoded HTML at...

CVE-2026-126474 OpenEMR before 8.5.0 Reflected XSS via ACL Module module_id Parameter

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the ACL module that allows attackers to execute JavaScript in authenticated sessions via the moduleid parameter. Attackers can deliver crafted acl/index or acl/acl links that inject unencoded input into inline script...

EUVD-2026-124950

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the ACL module that allows attackers to execute JavaScript in authenticated sessions via the moduleid parameter. Attackers can deliver crafted acl/index or acl/acl links that inject unencoded input into inline script...

CVE-2026-126475 OpenEMR before 8.5.0 Reflected XSS via searchEleNo in Auto-Suggest Endpoint

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by injecting payloads into the searchEleNo POST parameter of the application/index/search endpoint. Attackers can break out of unencoded HTML attributes in...

EUVD-2026-124949

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by injecting payloads into the searchEleNo POST parameter of the application/index/search endpoint. Attackers can break out of unencoded HTML attributes in...

EUVD-2026-124948

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest endpoint, which echoes the searchMode POST parameter unencoded into a single-quoted onClick attribute. Attackers can induce an authenticated user to submit a single-quote payload ...

CVE-2026-126476 OpenEMR before 8.5.0 Reflected XSS via auto-suggest searchMode parameter

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest endpoint, which echoes the searchMode POST parameter unencoded into a single-quoted onClick attribute. Attackers can induce an authenticated user to submit a single-quote payload ...

CVE-2026-126476

OpenEMR versions prior to 8.5.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the Application module's auto-suggest endpoint . The flaw occurs because the searchMode POST parameter is echoed back unencoded into a single-quoted onClick attribute. An attacker can tri...

CVE-2026-126476 OpenEMR before 8.5.0 Reflected XSS via auto-suggest searchMode parameter

OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest endpoint, which echoes the searchMode POST parameter unencoded into a single-quoted onClick attribute. Attackers can induce an authenticated user to submit a single-quote payload ...