320 matches found
WebView2-Cookie-Stealer
Blog Post Please read this blog post to get more information. Source Code This code is a modified version of Microsoft's WebView2 Code. The current code can be cleaned up and made much better. Demo Launch Example Usage Example Usage Tested on Windows 10 & 11. When the binary is executed...
CookieCatcher
CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...
CVE-2021-42662
CVE-2021-42662 CVE-2021-42662 - Vulnerabilidad de Cross-Site Scripting almacenado en el sistema de reserva y reserva de eventos en línea versión 2.3.0. Descripción técnica: Existe una vulnerabilidad XSS almacenado en el software de gestión de eventos versión 2.3.0. Un atacante puede aprovechar es...
CVE-2021-46067
CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...
CVE-2024-34568
Exploit Title: LetterPress = 1.2.1 - Cookie Stealing Vulnerability Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...
Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...
CVE-2024-6529
Prueba de Concepto PoC para Vulnerabilidades en Plugins de WordPress Este repositorio contiene scripts de Prueba de Concepto PoC para varias vulnerabilidades descubiertas en diferentes plugins de WordPress. Estos scripts demuestran cómo los atacantes pueden explotar estas vulnerabilidades para...
CVE-2021-42664
CVE-2021-42664 CVE-2021-42664 - Vulnerabilidad de Cross-Site Scripting almacenado en el sistema Engineers online portal system. Descripción técnica: Existe una vulnerabilidad XSS almacenado en el sistema Engineers online portal system. Un atacante puede aprovechar esta vulnerabilidad para ejecuta...
CVE-2026-82646
WWBN AVideo is affected by an unauthenticated reflected cross-site scripting (XSS) vulnerability in the url2Embed.json.php endpoint. The root cause is that URLs containing HTML metacharacters are not properly escaped when embedded into an encrypted evideo payload, allowing an attacker to inject m...
EUVD-2018-13358
Malware in sbrugna...
EUVD-2019-5890
Malware in sbrugna...
EUVD-2019-6242
Malware in sbrugna...
EUVD-2021-15889
Malware in sbrugna...
EUVD-2021-29625
Malicious code in bioql PyPI...
EUVD-2021-29623
Malicious code in bioql PyPI...
EUVD-2022-35232
Malicious code in bioql PyPI...
EUVD-2022-3314
Malicious code in bioql PyPI...
CVE-2022-30017
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...
CVE-2021-42662
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...