2748 matches found
CVE-2022-46638
CVE-2022-46638 Riguarda la vulnerabilità di AppLock Ver.5.6.2, una popolare app Android utilizzata da oltre 100 milioni di utenti in più di 150 paesi. PoC Sblocca l'applicazione protetta da AppLock semplicemente toccando più volte il pulsante indietro. 1. Apri l'applicazione bloccata da AppLock. ...
CVE-2024-25293
PoC di esecuzione locale di codice MJML Una Proof-of-Concept per la vulnerabilità CVE-2024-25293. È stato scoperto che mjml-app v3.0.4 e 3.1.0-beta presentano una vulnerabilità di remote code execution RCE. In questo repository è presente un esempio di applicazione vulnerabile e un exploit...
Bolt-CMS-3.6.2---Cross-Site-Scripting
Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prova di concetto Per sfruttare la vulnerabilità, Bolt CMS 3.6.2 consente XSS tramite l'input di testo facendo clic sul pulsante di...
TaskManager-Button-Disabler
TaskManager-Button-Disabler Modo semplice per disabilitare/rinominare i pulsanti dal task manager. Installazione root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build Funzionalità Rinomina il...
CVE-2020-27603-bbb-libreoffice-poc
CVE-2020-27603-bbb-libreoffice-poc Proof of Concept della vulnerabilità di esfiltrazione di file di Libreoffice in Big Blue Button Questi file ODT mostrano come sfruttare una vulnerabilità di esfiltrazione di file che può verificarsi con il rendering lato server di Libreoffice, ad esempio...
BestWebSoft's Twitter < 2.55 - Cross-Site Scripting
The twitter-plugin plugin before 2.55 for WordPress has XSS. id: CVE-2017-18505 info: name: BestWebSoft's Twitter 2.55 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The twitter-plugin plugin before 2.55 for WordPress has XSS. impact: | Authenticated attackers can...
CVE-2025-69581
CVE-2025-69581 In Chamilo LMS 1.11.2 wurde ein Problem entdeckt. Der Endpunkt /personaldata des sozialen Netzwerks legt selbst nach dem Abmelden vollständige sensible Benutzerinformationen offen, da ein ordnungsgemäßer Cache-Control fehlt. Durch die Verwendung der Zurück-Schaltfläche des Browsers...
EUVD-2026-64891
RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...
Centry
Centry ATTENZIONE: QUESTO È UN SOFTWARE SPERIMENTALE. È PROBABILE CHE CONTENGA BUG. Aggiornamenti Se hai già installato Centry, esegui git pull per aggiornare all'ultima versione. Gli ultimi aggiornamenti la rendono molto più sicura contro gli attacchi replay. Introduzione Centry è un pulsante...
CVE-2026-18756 HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering
HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button configuration in the options query-string parameter of space/membership/request-membership-form, lure an authenticated...
CVE-2026-18756 HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering
HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button configuration in the options query-string parameter of space/membership/request-membership-form, lure an authenticated...
WordPress Beaver Builder Page Builder plugin <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter vulnerability
Authenticated Author+ Stored Cross-Site Scripting via Button Module 'button' Parameter vulnerability discovered by a1batr0ss in WordPress Plugin Beaver Builder versions = 2.10.2.2...
CVE-2026-17090
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Button Module 'button' Button Code Setting in all versions up to, and including, 2.10.2.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-17090 Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Button Module 'button' Button Code Setting in all versions up to, and including, 2.10.2.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-17090
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Button Module 'button' Button Code Setting in all versions up to, and including, 2.10.2.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-17090
The Beaver Builder Page Builder (WordPress) is affected by a Stored Cross-Site Scripting flaw in the Button Module settings, up to version 2.10.2.2, caused by insufficient input sanitization and output escaping. Authenticated users with author-level access or higher can exploit this to inject arb...
PT-2026-72158
Name of the Vulnerable Software and Affected Versions Beaver Builder Page Builder versions prior to 2.10.2.3 Description The Beaver Builder Page Builder plugin for WordPress contains a stored cross-site scripting issue. This occurs due to insufficient input sanitization and output escaping within...
WordPress Payment Button for PayPal plugin <= 1.2.3.44 - Unauthenticated Payment Price Manipulation vulnerability
Unauthenticated Payment Price Manipulation vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Payment Button for PayPal versions = 1.2.3.44...