1143905 matches found
XSS-Scanner
XSS Scanner Cross-Site Scripting XSS is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS...
traxss
Traxss Escáner Automatizado de Vulnerabilidades XSS | Escrito en Python3 | Utiliza Selenium Headless Forks DEMO Antecedentes ¡Traxss es un proyecto de Hacktoberfest! Si buscas un lugar para contribuir, siéntete libre. Traxss es un framework automatizado para escanear URLs y páginas web en busca d...
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OAuth Server versions = 4.5.1...
CVE-2026-93908
The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.3 . The flaw exists in the 'before_price_text' parameter due to insufficient input sanitization and output escaping. Specif...
uxss-poc
PoC Universal de Cross Site Scripting Este es un PoC para CVE-2015-0072 para obtener secuencialmente las cookies de los sitios web objetivo. Descargo de responsabilidad Este PoC tiene fines educativos únicamente. No lo utilices contra ningún sistema sin permiso previo. Eres responsable de lo que...
CVE-2022-29455
CVE-2022-29455 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Vulnerable Version Example - https://www.youtube.com/watch?v=4qvOkSbhcE...
Web-Security-Learning
Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...
PwnXSS
Un potente escáner XSS hecho en Python 3.7 Instalación Requisitos: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Comandos: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Uso Uso básico: python3 pwnxss.py -u...
CVE-2023-30212-LAB
Creando un Entorno Docker Vulnerable CVE-2023-30212 Descripción CVE-2023-30212 es una vulnerabilidad de seguridad que afecta a versiones de OURPHP anteriores o iguales a 7.2.0. Esta vulnerabilidad permite ataques de Cross-Site Scripting XSS OURPHP Pasos descarguemos Dockerfile Abre la terminal en...
EUVD-2026-89663
Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS . If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...
Vulnerable-Docker--CVE-2023-30212-
Vulnerable-Docker-CVE-2023-30212- Esto contiene los directorios necesarios y el Dockerfile para replicar una vulnerabilidad en OURPHP que tiene una vulnerabilidad XSS CVE-2023-30212. Creando un Entorno Docker Vulnerable CVE-2023-30212 PRE-REQUISITOS Descargar Docker sudo apt install -y docker.io...
EUVD-2026-89661
Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...
CVE-2026-102586
A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...
XSSight
WARNING: This page is only for education, every malicious purpose from the users that are using it, will be punished with law rules! XSSight Cross-site Scripting XSS Cross-site Scripting XSS is an attack technique that involves echoing attacker-supplied code into a user's browser instance. A...
XSS-Payloads
Este repositorio no tiene un README...
CVE-2022-28077
CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28077 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
CVE-2023-0214
SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhigh Secure Web...
CVE-2026-91832 WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF
The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...