320 matches found
WebView2-Cookie-Stealer
Статья в блоге Пожалуйста, прочитайте эту статью в блоге, чтобы получить больше информации. Исходный код Этот код является модифицированной версией кода WebView2 от Microsoft. Текущий код можно почистить и значительно улучшить. Демонстрация Пример запуска Пример использования Использование...
CVE-2026-82646
WWBN AVideo is affected by an unauthenticated reflected cross-site scripting (XSS) vulnerability in the url2Embed.json.php endpoint. The root cause is that URLs containing HTML metacharacters are not properly escaped when embedded into an encrypted evideo payload, allowing an attacker to inject m...
CookieCatcher
CookieCatcher CookieCatcher는 웹 애플리케이션 내 XSS교차 사이트 스크립팅 취약점을 악용하여 사용자 세션 ID일명 세션 하이재킹를 탈취하는 데 도움을 주기 위해 만들어진 오픈 소스 애플리케이션입니다. 이 애플리케이션의 사용은 순전히 교육 목적으로만 허용되며, 대상 애플리케이션의 적절한 허가 없이 사용해서는 안 됩니다. XSS에 대한 자세한 내용은 다음 링크를 방문하십시오: https://www.owasp.org/index.php/Cross-siteScriptingXSS 세션 하이재킹에 대한 자세한 내용은...
CVE-2024-6529
Prova di Concetto PoC per Vulnerabilità nei Plugin WordPress Questo repository contiene script di Prova di Concetto PoC per varie vulnerabilità scoperte in diversi plugin WordPress. Questi script dimostrano come un attaccante può sfruttare queste vulnerabilità per eseguire azioni dannose. Indice...
CVE-2021-42664
CVE-2021-42664 CVE-2021-42664 - Gespeicherte Cross-Site-Scripting-Schwachstelle im Engineers Online-Portal-System. Technische Beschreibung: Eine gespeicherte XSS-Schwachstelle existiert im Engineers Online-Portal-System. Ein Angreifer kann diese Schwachstelle ausnutzen, um javascript im Namen des...
CVE-2021-46067
CVE-2021-46067 Exploit-Titel: Vehicle Service Management System - 'Mehrfacher' Cookie-Diebstahl führt zur vollständigen Account-Übernahme Exploit-Autor: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 KRITISCH Referenzen:...
CVE-2024-34568
Exploit Title: LetterPress = 1.2.1 - Vulnerabilità di Furto di Cookie Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...
CVE-2021-42662
CVE-2021-42662 CVE-2021-42662 - ऑनलाइन इवेंट बुकिंग और आरक्षण प्रणाली संस्करण 2.3.0 में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग भेद्यता। तकनीकी विवरण: इवेंट प्रबंधन सॉफ्टवेयर संस्करण 2.3.0 में एक संग्रहीत XSS भेद्यता मौजूद है। एक हमलावर इस भेद्यता का उपयोग करके वेब सर्वर के उपयोगकर्ताओं की ओर से...
Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Múltiplo' Roubo de Cookies Leva à Assunção Total de Conta Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO References:...
EUVD-2019-5890
Malware in sbrugna...
EUVD-2018-13358
Malware in sbrugna...
EUVD-2019-6242
Malware in sbrugna...
EUVD-2021-15889
Malware in sbrugna...
EUVD-2021-29625
Malicious code in bioql PyPI...
EUVD-2021-29623
Malicious code in bioql PyPI...
EUVD-2022-35232
Malicious code in bioql PyPI...
EUVD-2022-3314
Malicious code in bioql PyPI...
CVE-2022-30017
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...
CVE-2021-42662
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...