Composr-CMS-10.0.13-Cross-Site-Scripting-XSS

Composr-CMS-10.0.13-Cross-Site-Scripting-XSS Composr CMS 10.0.13 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6518...

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

Mnemosyne

Mnemosyne My personal infosec memo Fun fact The name of this project comes from the Greek goddess of memory: Mnemosyne. Moreover and regarding our story, it is interesting to note that, it's the origin of the word memory. Usage Mnemosyne is publicly available on the sub-domain of the same name of...

CVE-2024-50962

Cross-Site Scripting XSS in DonWeb Ferozo Webmail CVE-2024-50962 Description A Cross-Site Scripting XSS vulnerability in Ferozo Webmail v1.1 allows attackers to execute arbitrary scripts via the Identities and Automatic Responses components. This vulnerability can be used to hijack user sessions,...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

https-nj.gov---CVE-2019-8331

https-nj.gov---CVE-2019-8331 Vulnearability Report of the New Jersey official site Bootstrap 4.0.0 Found in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Vulnerability info: Medium 28236 XSS in data-template, data-content and data-title properties of tooltip/popover...

CVE-2023-30212

CVE-2023-30212 Exploiting vulnerability in Ourphp version 7.2.0 also called CVE 2023 30212 Step 1. Download and install Docker in your system Note. I am using Docker because it’s quick and easy to install ubuntu. Step 2. Setup Docker environment root@kitploit: docker pull ubuntu docker run -d -t...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2023-30212-LAB

Creating a Vulnerable Docker Environment CVE-2023-30212 Description CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting XSS attacks OURPHP Steps let’s download Dockerfile Open Terminal in the...

Stored-xss

Stored-xss CVE-2023-41575 - Stored XSS...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-11611...

CVE-2021-39475

CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2024-4367-POC-PDFJS

CVE 2024 4367: PoC pour l'exploitation de XSS Cross-Site Scripting 1. Displaying an Alert XSS Trigger Another exploitation example consists of injecting a simple alert message to check if the attack works. root@kitploit: python poc.py "alert'XSS exploit triggered';" Explanation : This code inject...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

cpanel_xss_2023

About the Tool ⚒️ cpanelxss2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability and exploitability in cpanel. Features ⚙️ CVE-2023-29489 Scanning: Identifies and scans for the CVE-2023-29489 vulnerability and exploitation. URL Input: Supports scanning a single URL or...

instructions-summarizing

instructions-summarizing Site containing info useful for demonstrate CVE-2023-37273...

CVE-2024-37383_PoC

This is a repository for hands-on practice of the CVE-2024-37383 vulnerability. Analysis Report: blog / pdf CVE-2024-37383 Detail Name : Roundcube Webmail SVG Parsing XSS Target : Roundcube Webmail v1.5.7 or v1.6.x tag into an email, arbitrary scripts are executed in the browser. Exploit...

CVE-2023-45857-Demo

Demo to verify the behavior of Axios vulnerability CVE-2023-45857 1. Start with dev container 2. Run npm run dev in the app container 3. Access http://app.localhost 4. Verify that the cookie XSRF-TOKEN is set in the browser's developer tools The value is CREDENTIALTOKEN HttpOnly is false SameSite...

autowpscan

autowpscan An automated tool that automatically scanning a list of multiple websites with wordpress at once. and send scan summary to telegram with wpscan logs. Requires wpscan, Telegram BOT Token, WordPress Vulnerability Database API token Introduction This tool takes a list of multiple websites...