CVE-2025-7840

XSS Exploit for CVE-2025-7840 Author : Byte Reaper @ByteReaper0 Description Proof‑of‑concept exploit for CVE-2025-7840 , targeting a vulnerable web application endpoint that fails to sanitize user input on the Firstname parameter of a reservation form. By crafting a GET request to:...

BurpSuite-For-Pentester

🕷️ BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...

xss

This repository does not have a README...

CVE-2018-6643

CVE-2018-6643 CVE-2018-6643 Infoblox NetMRI 7.1.1 hxxp::/xxx.abc/api/docs/index.php?query=555"...

CVE-2025-0133

CVE-2025-0133 Vulnerability Scanner A Bash-based automated scanner tool for detecting the CVE-2025-0133 Reflected XSS vulnerability in Palo Alto GlobalProtect Gateway & Portal using nuclei and shodanx. Author : Date : 2025-06-23 Severity : Medium CVE ID : CVE-2025-0133 Vulnerability Type :...

CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This repository hosts an automated Proof-of-Concept PoC exploit for CVE-2025-8550 , a reflected Cross‑Site Scripting XSS vulnerability in atjiu pybbs ≤ v6.0.0. It targets the /admin/topic/list endpoint’s username parameter, which lacks proper...

Vulnerable-Web-Application

Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...

XSSTRON

XSSTRON, Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation Install Node.js and npm https://www.npmjs.com/get-npm or sudo apt insta...

CVE-2024-25503

CVE-2024-25503 Vulnerability type : Cross Site Scripting XSS Product: Advanced REST Client desktop application Vulnerable Version: 17.0.9 Vendor of the products:https://www.advancedrestclient.com/ 1. Description Cross-Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a...

CVE-2023-31852

CVE-2023-31852 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/config has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

CVE-2026-40179-PoC

CVE-2026-40179 — Prometheus stored XSS via remotewrite A minimal, dependency-light proof of concept for CVE-2026-40179 GHSA-vffh-x6r8-xx99: stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remotewrite endpoint. The vulnerability Prometheus 3.x renders...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

weaponised-XSS-payloads

Weaponised XSS Payloads XSS payloads designed to turn alert1 into P1. The Blog Post This repo was released alongside a blogpost titled "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 What is this? In this reposito...

CVE-2023-1767

Stored XSS snyk.io Discovery 19/03/23 CVE-2023-1767 Responsible Vulnerability Disclosure Report Vulnerability blog post coverage Exploit PoC...

CVE-2020-15215-Discord-POC

Discord Electron ISO Boundary Validation PoC Scope This repository is a proof-of-concept validation harness for Electron boundary hardening in Discord-style desktop architectures. It models renderer/main-process separation, preload bridge policy, IPC channel exposure, navigation controls, and...

xsshunter-express

XSS Hunter Express Sets up in 5 minutes and requires no maintenance The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities. Setup Five minutes, try not to skim too much Requirements docker and docker-compose installed Host with at least 2 GB of RAM A...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell Technical analysis and defensive mitigation matrix for the CVE-2026-64638 XSS2Shell vector, a critical parsing inconsistency in the WordPress Core authentication screen that makes it possible to chain a reflected pre-authentication Cross-Site Scripting XSS with browser...

CVE-2024-6783

CVE-2024-6783 - Vue CVE A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript...

CVE-2021-39476

CVE-2021-39476 Found multiple XSS vulnerabilities within PhoenixCart 1.0.8.0 2x XSS on the same page "Edit the Category Title for SEO:" "Edit the Category Description" Link: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...