13 matches found
CVE-2023-41425
https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6BA8AC1AC Wonder CMS RCE | | 描述：XSS到RCE，Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat xssrce.js var xhr=new XMLHttpRequest; xhr.open"GET",...
cobaltstrike_swing_xss2rce
此存储库没有 README。...
CVE-2023-41425
Wonder CMS RCE | | Descripción : XSS a RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF Starting a new web server to serve payloads sudo python3 -m http.server $LPORTWEB & | | Después de enviar el XSS RCE al...
xsser
XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...
PoC-CVE-2025-26529
CVE-2025-26529的PoC – Moodle XSS到RCE利用 这是一个Proof of Concept PoC，演示了Moodle中从SSRF到XSS再到RCE的漏洞链。 概述 我已经上传了所有必要的文件来演示完整的利用链： 1. SSRF到XSS 2. 获取管理员cookie 3. 使用管理员cookie在Moodle中实现远程代码执行RCE 已在Moodle版本4.4.5 Build: 20241209上测试。 重要说明 在继续之前，请务必仔细检查文件 。您需要修改一些元素，比如您的IP地址 。 PoC视频 为了逐步讲解，我还上传了一个视频演示该利用：...
CVE-2023-41425
CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web server port...
xss2shell
🔥 XSS2Shell — Escáner y kit de PoC para CVE-2026-64638 Escáner masivo basado en el comportamiento y generador de PoC de calidad probatoria para la cadena XSS a RCE sin autenticación previa de WordPress que afecta a más de 500 millones de sitios web. Solo detección. Sin weaponización. Diseñado par...
XSS2Shell-CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/scanning utility for authorized WordPress security testing. The project contains a single-target exploitation workflow and a concurrent multi-target scan-only mode. Important: Use this project only on WordPress installations that you own or...
CVE-2026-95626 Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources remain active even when a nonce is presen...
CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...
PT-2026-82681
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...
CVE-2026-75916 SiYuan XSS-to-RCE via unescaped block metadata in hint popup
SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...
