161 matches found
XSS-Payloads
Ce depot n’a pas de fichier README...
HackTools
Bienvenue sur HackTools ! — — — —...
AwesomeXSS
AwesomeXSS Ce dépôt est une collection de ressources XSS géniales. Les contributions sont les bienvenues et doivent être soumises via une issue. Sommaire Défis Lectures et présentations Outils Cartes mentales DOM XSS Payloads Polyglottes Balises et gestionnaires d'événements Rupture de contexte...
payloads
payloads Git All the Payloads! Une collection de charges utiles d'attaque web. Les pull requests sont les bienvenues ! Utilisation exécutez ./get.sh pour télécharger les charges utiles externes et décompresser les fichiers de charges utiles qui sont compressés. Crédits des charges utiles fuzzdb -...
Tiny-XSS-Payloads
Tiny-XSS-Payloads Une collection de courtes charges utiles XSS pouvant être utilisées dans différents contextes. La démo disponible ici : https://tinyxss.terjanq.me Charges utiles actuelles root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit:...
weaponised-XSS-payloads
Weaponised XSS Payloads XSS-пейлоады, созданные для превращения alert1 в P1. Статья в блоге Этот репозиторий был опубликован вместе со статьёй под названием "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 Что это...
xss-payload-list
xss-payload-list 🎯 크로스 사이트 스크립팅XSS 취약점 페이로드 목록...
EUVD-2026-48273
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
CVE-2023-31434
The parameters nutzertitel, nutzervn, and nutzernn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations...
CVE-2025-23213
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and svg. Both can contain malicious content XSS Payloads. This vulnerability is fixed in 1.5.28...
CVE-2025-67341
jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users...
CVE-2025-11504
The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently us...
CVE-2025-11504 Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure
The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently us...
CVE-2025-11504
CVE-2025-11504 concerns the Quickcreator – AI Blog Writer plugin for WordPress. Affected versions 0.0.9–0.1.17 expose the plugin’s API key via the /wp-content/plugins/quickcreator/dupasrala.txt file, enabling unauthenticated access. The exposure permits attackers to obtain the API key and use it ...
PT-2025-43593
Name of the Vulnerable Software and Affected Versions Quickcreator – AI Blog Writer plugin for WordPress versions 0.0.9 through 0.1.17 Description The Quickcreator – AI Blog Writer plugin for WordPress is susceptible to exposure of sensitive information. An unauthenticated attacker can access the...
EUVD-2021-11246
Malware in sbrugna...
EUVD-2021-23962
Malware in sbrugna...
EUVD-2021-11241
Malware in sbrugna...