36576 matches found
CVE-2025-26159
CVE-2025-26159 यह स्क्रिप्ट केवल अधिकृत वातावरण में उपयोग की जा सकती है जहाँ स्पष्ट अनुमति प्रदान की गई हो। लेखक इस स्क्रिप्ट के उपयोग से होने वाले किसी भी दुरुपयोग, क्षति या परिणामों के लिए जिम्मेदार नहीं है। यह स्क्रिप्ट CVE-2025-26159 के शोषण के भाग के रूप में कुकीज़ को डीकोड, फ़िल्टर और निकाल...
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...
CVE-2022-46087
CVE-2022-46087 CloudSchool v3.0.1 Cross Site Scripting XSS के प्रति संवेदनशील है। एक सामान्य उपयोगकर्ता व्यवस्थापक उपयोगकर्ता द्वारा प्राप्त अधिसूचना के माध्यम से व्यवस्थापक उपयोगकर्ताओं के session cookies चुरा सकता है। देखें:...
CVE-2026-105116 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...
EUVD-2026-92020
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...
CVE-2026-105116
OpenAM versions prior to 16.1.3 are affected by a latent cross-site scripting (XSS) defect. The vulnerability occurs because the SAML message , relay state , and target URL are placed unencoded into the load-balancer cookie bounce auto-submit page. If the cookieHashRedirectEnabled setting is acti...
CVE-2026-105116 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...
CVE-2026-105116 OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...
CVE-2023-33733-Exploit-PoC
CVE-2023-33733-POC إخلاء مسؤولية لم أكتشف هذه الثغرة الأمنية، ولا أنسب لنفسي الفضل في العثور عليها. هذا مجرد سكربت أنشأته لاستغلال هذه الثغرة بسهولة أكبر في مسابقة CTF. للمعلومات الأصلية، يرجى الرجوع إلى: https://github.com/c53elyas/CVE-2023-33733 هذا السكربت مصمم ببساطة ليكون سكربت Python3 سريعً...
CVE-2026-75865
CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 إثبات المفهوم وتقرير تقني لـ CVE-2026-75865 ، وهو ثغرة رفع ملفات تعسفي بدون مصادقة تؤدي إلى تنفيذ كود عن بُعد في إضافة WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode الخاصة بووردبريس...
CVE-2020-9484
CVE-2020-9484 Tomcat केवल शैक्षिक उद्देश्यों के लिए। विवरण के लिए संदर्भ देखें। चलाएं $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy जाँच साफ $ docker exec -it $CONTAINER ls -la...
CVE-2022-35416
CVE-2022-35416 H3CSSLVPNXSS XSS المنعكس CVE-2022-35416 من https://www.cloudwaf.cc/cve/cve-2022-35416 الحمولة: Shodan: http.htmlhash:510586239 عنوان الوصول：https://IP:PORT/wnm/login/login.json. الحمولة: Cookie: svpnlang=XSSPAYLOAD الوصف يسمح H3C SSL VPN حتى 2022-07-10 بـ XSS في ملف...
Exploit for CVE-2026-92592
CVE-2026-92592: Craft CMS authenticated RCE Proof of concept...
CVE-2026-92977
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
CVE-2023-31853
CVE-2023-31853 Cudy LT400 के वेब-आधारित प्रबंधन इंटरफ़ेस में रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग XSS हमला मौजूद है। पेज /cgi-bin/luci/admin/network/bandwidth में icon पैरामीटर के माध्यम से रिफ्लेक्टेड XSS है। हमले के तरीकों में पीड़ित को एक विशेष रूप से तैयार अनुरोध भेजना शामिल होगा जिसमें...
cve-2025-5777-citrixbleed2_reproduction
CVE-2025-5777 — CitrixBleed 2 كشف الذاكرة في Citrix NetScaler CVSS 9.3 — حرِج — استغلال نشط في البرية CitrixBleed 2 هو ثغرة كشف ذاكرة في Citrix NetScaler ADC وNetScaler Gateway. يؤدي التحقق غير الكافي من المدخلات في نقطة نهاية المصادقة إلى قراءة زائدة للذاكرة CWE-125 ، مما يسمح لمهاجم غير مصادَق...
EUVD-2026-91892
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
CVE-2026-92977
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.3.5 . The root cause is insufficient input sanitization and output escaping, specifically where a page-wide regex strips closing quo...
CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...