1125868 matches found
CVE-2023-49540
CVE-2023-49540 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in /index.php/history - vulnerable field: "Customer's Name". Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. T...
CVE-2021-43141
CVE-2021-43141 CVE-2021-43141 के बारे में जानकारी, planapplication अनुभाग में एक रिफ्लेक्टेड XSS।...
CVE-2017-18635
cve-2017-18635 PoC for CVE-2017-18635 Full article: Exploiting an old noVNC XSS CVE-2017-18635 in OpenStack...
SpaceX-Starlink-Router-Gen-2-XSS
SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
Google Cloud Vertex AI SDK google-cloud-aiplatform के संस्करण 1.98.0 से 1.131.0 लेकिन शामिल नहीं तक के genai/evalsvisualization.py में अप्रमाणित संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS - github.com/googleapis/python-aiplatform लेखक: Joshua Provoste N-day शोधकर्ता एवं डेवलपर श्रेय: Din Asotić Zero-da...
CVE-2024-39248
Exploit Title: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php A cross-site scripting XSS vulnerability in SimpCMS v0.1 allows...
EUVD-2026-71999
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are...
CVE-2026-86197
Grav versions before 2.0.20 contain a cross-site scripting (XSS) vulnerability in the Twig sandbox policy . The addJs and addCss methods on Grav\Common\Assets are allowlisted without proper output escaping, allowing page editors to inject arbitrary script by registering malicious assets or inject...
CVE-2026-86188
AVideo installations with the YPTSocket plugin enabled are affected by an unauthenticated cross-site scripting (XSS) vulnerability. Attackers can send crafted WebSocket messages whose callback names resolve to global functions such as avideoConfirmHTML, which assign untrusted data to innerHTML, e...
EUVD-2026-72009
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to execute arbitrary JavaScript in other users' browsers via the websocket callback mechanism. Attackers can send crafted socket messages with callback names resolving to global...
CVE-2025-51397
Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...
CVE-2024-23998
Another Redis Desktop Manager PoC دليل إثبات المفهوم لثغرة CVE-2024-23998. 1. نظرة عامة على الثغرة الأمنية: موضوع الثغرة الأمنية: تنفيذ كود محلي عبر XSS إصدار الثغرة الأمنية: =\ 2. Font selection is orderly. It is suggested to choose English font first and then font...
CVE-2020-3580
CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt fi...
CVE-2025-55888
CVE-2025-55888 Description Cross-Site Scripting XSS vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered,...
railsgoat
RailsGoat RailsGoat هو تطبيق ويب ضعيف عمداً مبني على Ruby on Rails. يعرض ثغرات أمنية حقيقية من قائمة OWASP Top 10 ويُعد منصة تدريب عملية للمطورين ومحترفي الأمن. ما هو RailsGoat؟ RailsGoat هو تطبيق Rails غير آمن عمداً مصمم لتعليم أمن تطبيقات الويب. من خلال استكشاف ثغراته واستغلالها، ستتعلم: كيف تظ...
CVE-2019-8331
Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...
CVE-2020-9460
CVE-2020-9460 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignNam...
CVE-2023-49984
CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...
CVE-2026-47761
👋 Bonjour ! Security Research 🛡️ CVE-2026-47761 – Security Researcher Type : Stored Cross-Site Scripting XSS Produit : TinyMCE Références : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Hall of Fame...