CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script

CVE-2026-21013 – PDF-JavaScript-Injektion über eingebettetes Skript Programmcode Python zum Erzeugen einer bösartigen PDF root@kitploit: generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f:...

POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-32621 - Apollo Federation Prototype Pollution PoC Übersicht...

test-xss-swagger-CVE-2019-1749

Dieses Repository hat keine README-Datei...

CVE-2025-65881

CVE-2025-65881 Il progetto Zoo Management System v1.00 è vulnerabile a Cross-site scripting XSS su /zms/classes/Login.php?f=login a causa di: 1. Content-type non valido delle risposte JSON su /zms/classes/Login.php?f=login 2. Input utente non sanificato nelle risposte Consentendo a attaccanti non...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Sicherheitslücke bei der Remote-Code-Ausführung Video-Demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Die Real Player G2 Control-Komponente enthält eine Sicherheitslücke bei der Remote-Code-Ausführung, da sie es erlaubt, dass 'javascript:'-URIs al...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle Il bundle Apache Sling XSS fornisce due servizi per l'escape e il filtraggio di contenuti forniti dagli utenti soggetti a XSS: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Controllare il JavaDoc di ciascun servizio per scoprire quali metodi forniscono...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2022-30513

CVE-2022-30513 Sistema de Gerenciamento de Dormitório Escolar 1.0 - XSS Refletido Título do Exploit: Sistema de Gerenciamento de Dormitório Escolar 1.0 - XSS Refletido Data: 2022-05-25 CVE: CVE-2022-30513 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do fornecedor:...

CVE-2022-41445

CVE-2022-41445 CodeIgnitor का उपयोग करते हुए शिक्षक रिकॉर्ड प्रबंधन प्रणाली में क्रॉस-साइट स्क्रिप्टिंग सुझाया गया विवरण CodeIgniter 1.0 का उपयोग करते हुए रिकॉर्ड प्रबंधन प्रणाली में एक क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता हमलावरों को Add Subject पृष्ठ पर इंजेक्ट किए गए एक क्राफ्टेड पेलोड के माध्य...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting nel Blood Donor Management System Using CodeIgniter - 1.0 Descrizione suggerita Phpgurukul Blood Donor Management System 1.0 consente Cross Site Scripting tramite la funzione Aggiungi nome gruppo sanguigno. Informazioni aggiuntive PoC:...

CVE-2002-0346

CVE-2002-0346 Vulnerabilità di cross-site scripting in Cobalt RAQ 4 consente a un attaccante remoto di eseguire script arbitrari come altri utenti Cobalt tramite Javascript in un URL verso 1 service.cgi o 2 alert.cgi. Pubblicazione Packetstorm su...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS nella funzionalità di anteprima in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di anteprima nel plugin Amasty Blog Pro 2.10.3 per Magento 2 utilizza eval in modo non sicuro. Ciò consente agli aggressori di effettuare attacchi Cross-site...

WordPress Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cozy Blocks versions = 2.2.16...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2021-39475

CVE-2021-39475 XSS auf der Admin-Bewertungsseite https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Überblick Dies ist ein PoC zur CVE-2025-22131 , einer Cross-Site Scripting XSS-Sicherheitslücke in PhpSpreadsheet-Versionen vor 2.2.2, 2.1.2 und 1.29.4. Die Schwachstelle befindet sich in der Funktion generateNavigation, die Sheet-Namen während...

CVE-2022-33075

CVE-2022-33075 Título do Exploit: Zoo Management System 1.0 - Cross-Site-Scripting XSS Armazenado Data: 26/05/2022 Autor do Exploit: Angelo Pio Amirante Homepage do Fornecedor: https://www.sourcecodester.com/ Link do Software:...

EUVD-2026-65202

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...