WebView2-Cookie-Stealer

Article de blog Veuillez lire cet article de blog pour plus d'informations. Code source Ce code est une version modifiée du Code WebView2 de Microsoft. Le code actuel peut être nettoyé et amélioré. Démo Exemple de lancement Exemple d'utilisation Utilisation Testé sur Windows 10 et 11. Lorsque le...

CVE-2026-82646

WWBN AVideo is affected by an unauthenticated reflected cross-site scripting (XSS) vulnerability in the url2Embed.json.php endpoint. The root cause is that URLs containing HTML metacharacters are not properly escaped when embedded into an encrypted evideo payload, allowing an attacker to inject m...

CookieCatcher

CookieCatcher CookieCatcher est une application open source conçue pour faciliter l'exploitation des vulnérabilités XSS Cross Site Scripting dans les applications web afin de voler les identifiants de session des utilisateurs aka détournement de session. L'utilisation de cette application est...

CVE-2024-6529

Prova di Concetto PoC per Vulnerabilità nei Plugin WordPress Questo repository contiene script di Prova di Concetto PoC per varie vulnerabilità scoperte in diversi plugin WordPress. Questi script dimostrano come un attaccante può sfruttare queste vulnerabilità per eseguire azioni dannose. Indice...

CVE-2021-42664

CVE-2021-42664 CVE-2021-42664 - Gespeicherte Cross-Site-Scripting-Schwachstelle im Engineers Online-Portal-System. Technische Beschreibung: Eine gespeicherte XSS-Schwachstelle existiert im Engineers Online-Portal-System. Ein Angreifer kann diese Schwachstelle ausnutzen, um javascript im Namen des...

CVE-2021-46067

CVE-2021-46067 Exploit-Titel: Vehicle Service Management System - 'Mehrfacher' Cookie-Diebstahl führt zur vollständigen Account-Übernahme Exploit-Autor: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 KRITISCH Referenzen:...

CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Vulnerabilità di Furto di Cookie Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - ऑनलाइन इवेंट बुकिंग और आरक्षण प्रणाली संस्करण 2.3.0 में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग भेद्यता। तकनीकी विवरण: इवेंट प्रबंधन सॉफ्टवेयर संस्करण 2.3.0 में एक संग्रहीत XSS भेद्यता मौजूद है। एक हमलावर इस भेद्यता का उपयोग करके वेब सर्वर के उपयोगकर्ताओं की ओर से...

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Múltiplo' Roubo de Cookies Leva à Assunção Total de Conta Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO References:...

EUVD-2019-5890

Malware in sbrugna...

EUVD-2018-13358

Malware in sbrugna...

EUVD-2019-6242

Malware in sbrugna...

EUVD-2021-15889

Malware in sbrugna...

EUVD-2021-29625

Malicious code in bioql PyPI...

EUVD-2021-29623

Malicious code in bioql PyPI...

EUVD-2022-35232

Malicious code in bioql PyPI...

EUVD-2022-3314

Malicious code in bioql PyPI...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2021-42662

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

CVE-2021-29250

BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting XSS vulnerability within the POS Add Products functionality. This enables cookie stealing...