apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle Il bundle Apache Sling XSS fornisce due servizi per l'escape e il filtraggio di contenuti forniti dagli utenti soggetti a XSS: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Controllare il JavaDoc di ciascun servizio per scoprire quali metodi forniscono...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2022-30513

CVE-2022-30513 Sistema de Gerenciamento de Dormitório Escolar 1.0 - XSS Refletido Título do Exploit: Sistema de Gerenciamento de Dormitório Escolar 1.0 - XSS Refletido Data: 2022-05-25 CVE: CVE-2022-30513 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do fornecedor:...

CVE-2022-41445

CVE-2022-41445 CodeIgnitor का उपयोग करते हुए शिक्षक रिकॉर्ड प्रबंधन प्रणाली में क्रॉस-साइट स्क्रिप्टिंग सुझाया गया विवरण CodeIgniter 1.0 का उपयोग करते हुए रिकॉर्ड प्रबंधन प्रणाली में एक क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता हमलावरों को Add Subject पृष्ठ पर इंजेक्ट किए गए एक क्राफ्टेड पेलोड के माध्य...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting nel Blood Donor Management System Using CodeIgniter - 1.0 Descrizione suggerita Phpgurukul Blood Donor Management System 1.0 consente Cross Site Scripting tramite la funzione Aggiungi nome gruppo sanguigno. Informazioni aggiuntive PoC:...

CVE-2002-0346

CVE-2002-0346 Vulnerabilità di cross-site scripting in Cobalt RAQ 4 consente a un attaccante remoto di eseguire script arbitrari come altri utenti Cobalt tramite Javascript in un URL verso 1 service.cgi o 2 alert.cgi. Pubblicazione Packetstorm su...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS nella funzionalità di anteprima in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di anteprima nel plugin Amasty Blog Pro 2.10.3 per Magento 2 utilizza eval in modo non sicuro. Ciò consente agli aggressori di effettuare attacchi Cross-site...

WordPress Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cozy Blocks versions = 2.2.16...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2021-39475

CVE-2021-39475 XSS auf der Admin-Bewertungsseite https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Überblick Dies ist ein PoC zur CVE-2025-22131 , einer Cross-Site Scripting XSS-Sicherheitslücke in PhpSpreadsheet-Versionen vor 2.2.2, 2.1.2 und 1.29.4. Die Schwachstelle befindet sich in der Funktion generateNavigation, die Sheet-Namen während...

CVE-2022-33075

CVE-2022-33075 Título do Exploit: Zoo Management System 1.0 - Cross-Site-Scripting XSS Armazenado Data: 26/05/2022 Autor do Exploit: Angelo Pio Amirante Homepage do Fornecedor: https://www.sourcecodester.com/ Link do Software:...

Bootstrap-with-XSS

Raccolta di PoC per vulnerabilità storiche di Bootstrap Questa è una pagina HTML statica per scopi di studio e ricerca, che integra molteplici proof of concept PoC di vulnerabilità cross-site scripting XSS nella storia del framework Bootstrap. Questo progetto ha lo scopo di fornire a ricercatori ...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

EUVD-2026-65202

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704

Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...

CVE-2020-9496

CVE-2020-9496 Le richieste XML-RPC sono vulnerabili a deserializzazione non sicura e problemi di Cross-Site Scripting in Apache OFBiz 17.12.03 Requisiti di installazione root@kitploit: $ pip install -r requirements.txt $ wget...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...