Lucene search
+L

317 matches found

Kitploit
Kitploit
added 2026/09/16 12:18 p.m.10 views

CVE-2023-29489

CVE-2023-29489 La vulnerabilidad de seguridad está registrada en el sistema Common Vulnerabilities and Exposures CVE. Específicamente, esta vulnerabilidad está relacionada con cPanel, un popular software de gestión de hosting. Esta falla permite ataques de cross-site scripting XSS a través de...

6.1CVSS6.6AI score0.65533EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/16 11:56 a.m.10 views

CVE-2021-40906

CVE-2021-40906 - XSS Reflejado en una zona no autenticada Aplicación: Consola de Administración Web de CheckMK Revisión de Software: De 1.5.0 a 1.5.0p25 Autor: Edgar Augusto Loyola Torres. Tipo de ataque: XSS Reflejado Solución: Actualizar a la Revisión de Software 1.6.0p26 o posterior Resumen: E...

6.1CVSS6.4AI score0.00989EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 11:35 a.m.8 views

CVE-2025-63441

CVE-2025-63441 Title: Reflected XSS via arbitrarily supplied URL parameter param at endpoint u/administrator/friends Summary: A Reflected Cross-Site Scripting XSS vulnerability was identified in the u/administrator/friends endpoint of the OSSN application. This vulnerability allows attackers to...

7.3CVSS5.9AI score0.00273EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 11:16 a.m.10 views

CVE-2023-43325

mooSocial: XSS CVE-2023-43325 Existe una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro dataredirecturl en la función de inicio de sesión de mooSocial v3.1.8, lo que permite a los atacantes robar las cookies de sesión del usuario y suplantar su cuenta mediante una URL...

6.1CVSS6.4AI score0.01857EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 11:07 a.m.13 views

evilginx

Evilginx v.1.1.0 ESTA VERSIÓN ESTÁ OBSOLETA. ¡USE LA VERSIÓN MÁS RECIENTE! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx es un framework de ataque man-in-the-middle utilizado para suplantar credenciales y cookies de sesión de cualquier servicio web. Su núcleo se ejecuta en el servidor...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 6:59 a.m.10 views

CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Vulnerability in CMSimpleXH Overview A cross-site scripting XSS vulnerability has been identified in CMSimpleXH version 1.7.6. This vulnerability allows authorized users to upload SVG files containing malicious JavaScript code. The issue stems from...

6.1CVSS5.6AI score0.00713EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 6:46 a.m.13 views

CVE-2025-29602

CVE-2025-29602 - Vulnerabilidades de cross site scripting XSS almacenado en FlatPress CMS 1.3.1 Descripción Existe una vulnerabilidad de Cross-Site Scripting XSS almacenado en el panel de administración de Flatpress CMS 1.3.1. Un atacante con privilegios de administrador puede inyectar una carga...

6.1CVSS5.3AI score0.00275EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 5:55 a.m.10 views

CVE-2022-29359

Sistema de Aplicación para Clubes Escolares Problema: Cross-Site Scripting Almacenado No Autenticado hasta inyección HTML y RCE Autor: Zak Clifford Fecha: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

6.1CVSS6.7AI score0.0115EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 2:34 a.m.11 views

CVE-2025-65300

CVE-2025-65300 Description CVE-2025-65300: Stored Cross-Site Scripting XSS Vulnerability in Coohom SaaS Platform Disclosure Date: 2025-10-28 Last Updated: 2025-10-28 Reporter: Phisit Pupiw Vendor: Coohom CWE: CWE-79 – Cross-Site Scripting Summary A stored Cross-Site Scripting XSS vulnerability wa...

5.4CVSS6AI score0.00199EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/16 2:04 a.m.8 views

Bludit CMS <= 3.20.0 - Cross-Site Scripting

Bludit CMS contains a reflected XSS caused by improper sanitization in the search plugin, letting unauthenticated attackers inject arbitrary JavaScript, exploit requires crafted malicious search query. id: CVE-2026-41456 info: name: Bludit CMS = 3.20.0 - Cross-Site Scripting author: 0xAkoko...

5.1CVSS5.8AI score0.01902EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/15 9:54 p.m.11 views

adaPwn

adaPwn - CVE-2019-14912 PoC adAS OPENSSO module doesn't correctly verify the domain to redirect, making possible to redirect the user to an attacker controlled website, stealing his adAS session cookie. Usage usage: adaPwn.py -h --interface INTERFACE --httpPort HTTPPORT --dnsPort DNSPORT ipToSpoo...

6.1CVSS6.4AI score0.01193EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 9:21 p.m.8 views

CVE-2023-43326

mooSocial: XSS CVE-2023-43326 Existe una vulnerabilidad de cross-site scripting XSS reflejado en múltiples URL de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión de los usuarios y suplantar su cuenta a través de una URL manipulada. Nota: XSS también funciona cuando estas...

6.1CVSS6.5AI score0.01615EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 8:31 p.m.9 views

CVE-2020-15051

CVE-2020-15051 : Artica Proxy before 4.28.030418 Community Edition allows Stored Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

6.1CVSS6.2AI score0.02467EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 5:23 p.m.9 views

CVE-2019-13633

CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...

6.1CVSS6.6AI score0.00966EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 4:00 p.m.15 views

CVE-2023-44813

CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...

6.1CVSS6.5AI score0.01754EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 3:35 p.m.8 views

CVE-2023-45542

CVE-2023-45542 A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: q Exploit - Proof of Concept POC Reflect...

6.1CVSS6.5AI score0.01635EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 3:32 a.m.8 views

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

9.3CVSS8.1AI score0.99964EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/13 11:12 p.m.3 views

CVE-2026-52774-YESWIKI-XSS

CVE-2026-52774-YESWIKI-XSS CVE-2026-52774 is a reflected XSS vulnerability in YesWiki's Bazar widget handler. The query parameter in the NoSuchPage/widget endpoint is inadequately sanitized using striptags, which does not escape double quotes. This allows an attacker to break out of HTML attribut...

6.1CVSS5.9AI score0.00507EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:26 p.m.9 views

CVE-2025-50363_BXSS_CVE

Nombre del Proyecto y URL del Repositorio: Sistema de Gestión de Contratación de Empleadas Domésticas usando PHP y MySQL Tipo de Vulnerabilidad: Escalada de Privilegios mediante XSS Ciego Versiónes Afectadas: v1.0 💣Descripción de la Vulnerabilidad: Se descubrió una vulnerabilidad de Cross-Site...

5.4CVSS5.8AI score0.00234EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:12 p.m.9 views

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user. Reffer to: https://github.com/G37SYS73M/AdvisoryG37SYS73M/blob/main/CVE-2022-46087/poc.md...

5.4CVSS6.1AI score0.00602EPSS
SaveExploits1References1
Rows per page
Query Builder