CVE-2026-81290 WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

CVE-2026-81291

CVE-2026-81291 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Uncode theme , affecting versions ≤ 2.12.7 . The vulnerability was discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. With a CVSS 3.1 score of 7.1 (HIGH) , it has a network attack vector , low co...

WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WCFM Marketplace versions = 3.8.2...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF 靶机 — 多阶段漏洞利用虚拟机 💀 Kalaichelvan Thieveshkar CB013248 · 斯塔福德郡大学 · COMP50003 - Cyber Security II 概述 RootQuest 是一个专门构建的 CTF 虚拟机，包含一条 10 阶段 、顺序执行的攻击路径，横跨 5 个安全域 。每个挑战都会产生下一步所需的输出——玩家必须将 Web、加密、网络和本机漏洞利用串联起来，才能实现完整的 root 权限获取。 警告 / 预期用途： 此虚拟机仅用于教育、防御和授权的 CTF 用途。请勿 在生产网络中部署。请在隔离的实验环境中使用。...

WordPress Affiliate Super Assistent plugin <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability

Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability discovered by theviper17y in WordPress Plugin Affiliate Super Assistent versions = 1.10.2...

CVE-2026-82805

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

CVE-2023-33829-POC

CVE-2023-33829-POC SCM Manager 跨站脚本（XSS）...

EUVD-2026-68614

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

CVE-2026-82805

Typora (versions up to 1.13.8/1.14.6) is affected by a cross-site scripting (XSS) vulnerability in its Mermaid Rendering Engine . The flaw is triggered by manipulation of the classDef/style argument, and the attack can be launched remotely, though it requires user interaction (e.g., opening a cra...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2025-4123

Grafana CVE-2025-4123 漏洞利用工具 CVE 编号: CVE-2025-4123 严重性: 高 影响: 服务端请求伪造（SSRF）、跨站脚本（XSS） 受影响版本: Grafana 11.2, Grafana 11.3, Grafana 11.4, Grafana 11.5, Grafana 11.6, Grafana 12.0 完整分析文章: Writeup root@kitploit: ❯ sudo python server.py --host http://127.0.0.1 + 使用攻击者主机: http://127.0.0.1 + XSS 路由:...

Exploite-CVE-2023-30212-Vulnerability

创建易受 CVE-2023-30212 影响的 Docker 环境 描述 Docker 环境并利用 CVE-2023-30212 漏洞。CVE-2023-30212 是一个安全漏洞，影响 OURPHP 版本早于或等于 7.2.0。该漏洞允许跨站脚本（XSS）攻击 OURPHP sudo apt update sudo apt install docker.io 配置 Docker 镜像和 Docker 容器 基于当前目录中的 Dockerfile 构建 Docker 镜像 docker build -t docker build -t test . 用于运行基于该标签镜像的 Docker...

CVE-2023-29489

CVE-2023-29489 Cpanel 中的批量扫描漏洞 XSS KALI LINUX sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaal shodan pkg install pystyle pkg...

CVE-2022-30507-PoC

Descripción ejecución remota de código RCE mediante la ejecución de código javascript - Cross-site-scripting XSS y proceso de renderizado por nodeintegration, que es responsable del proceso de renderizado y del acceso al código node js Video PoC Referencia...

CVE-2024-37888

CVE-2024-37888 本仓库记录了我发现并报告的CVE-2024-37888的漏洞细节及利用方法。 指标 CWE-79: 在网页生成过程中对输入的不当中和（'跨站脚本'） CVSS: 6.1 中危 漏洞概述 此概念验证（POC）演示了我最近在 Open Link 插件中发现的一个 XSS 漏洞的利用，该插件一旦启用，会直接影响 CKEditor 4 的所有版本。该漏洞允许通过编辑器内精心构造的链接执行 JavaScript，而该插件未能对其进行清理。此漏洞仅在安装了 Open Link 插件时才能在文本区域内被利用。Open Link 插件允许我们直接在编辑区域内打开链接。 前提...

cPanel-CVE-2023-29489

cPanel CVE-2023-29489 的 POC XSS载荷...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...