13 matches found
CVE-2023-41425
Wonder CMS RCE | | Descrição : XSS para RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF Starting a new web server to serve payloads sudo python3 -m http.server $LPORTWEB & | | Após enviar o XSS RCE para o administrador...
xsser
XSSER ========== Präsentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017:...
CVE-2023-41425
https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6BA8AC1AC Wonder CMS RCE | | Beschreibung: XSS zu RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS-Payload, das das neue Theme installiert cat xssrce.js var xhr=new XMLHttpRequest; xhr.open"GET",...
CVE-2023-41425
CVE-2023-41425 CVE-2023-41425 XSS zu RCE, Wonder CMS 3.2.0 = 3.4.2 Verwendung ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web server por...
cobaltstrike_swing_xss2rce
Este repositorio nao tem um README...
xss2shell
🔥 XSS2Shell — Scanner e Kit de PoC para CVE-2026-64638 Scanner em massa orientado a comportamento e gerador de PoC de nível evidencial para a cadeia XSS-para-RCE de pré-autenticação do WordPress que afeta mais de 500 milhões de sites. Apenas detecção. Sem weaponização. Construído para programas d...
XSS2Shell-CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/scanning utility for authorized WordPress security testing. The project contains a single-target exploitation workflow and a concurrent multi-target scan-only mode. Important: Use this project only on WordPress installations that you own or...
PoC-CVE-2025-26529
PoC para CVE-2025-26529 – Exploração de XSS para RCE no Moodle Este é um Proof of Concept PoC que demonstra a cadeia de vulnerabilidades SSRF para XSS → XSS para RCE no Moodle. Visão Geral Enviei todos os arquivos necessários para demonstrar toda a cadeia de exploração: 1. SSRF para XSS 2...
CVE-2026-95626 Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources remain active even when a nonce is presen...
CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...
PT-2026-82681
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...
CVE-2026-75916 SiYuan XSS-to-RCE via unescaped block metadata in hint popup
SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...
