CVE-2026-82554

SourceCodester Queue Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /api/add_customer.php . Manipulating the Name parameter allows a remote, unauthenticated attacker to inject script, requiring user interaction to trigger. The impact is rated MEDIUM (C...

EUVD-2026-68276

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle Пакет Apache Sling XSS предоставляет два сервиса для экранирования и фильтрации пользовательского контента, подверженного XSS: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Пожалуйста, ознакомьтесь с JavaDoc каждого сервиса, чтобы узнать, какие методы он...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Множественные хранимые XSS в системе онлайн-записи к врачу В системе онлайн-записи к врачу версии 1.0 существует множество хранимых аутентифицированных межсайтовых сценариев XSS. Ссылка на ПО:...

CVE-2016-10993

CVE-2016-10993 Уязвимость Wordpress - XSS межсайтовый скриптинг Местоположение уязвимости https://themesinfo.com/scoreme-wordpress-theme-design-496 Подтверждение концепции PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Ссылки...

CVE-2025-30349

Уязвимость Horde IMP – обфускация через HTML-кодирование – XSS нагрузка Horde 5.2.23; IMP 6.2.27 Подробности уязвимости объяснены в файле Details.md. PoC создает и отправляет электронное письмо с нагрузкой, эксплуатирующей уязвимость, получателю. Такое письмо должно быть просмотрено в веб-клиенте...

CVE-2024-49379

Proof of Concept PoC для CVE-2024-49379 Этот репозиторий содержит Proof of Concept PoC на Python для критической уязвимости, обнаруженной в UmbrelOS. Уязвимость позволяет выполнять межсайтовый скриптинг XSS, который при определённых условиях может привести к удалённому выполнению кода RCE. Обзор...

CVE-2024-42009

CVE-2024-42009 PoC: Демонстрация перехвата писем и XSS-эксплойт Обзор Этот Proof of Concept PoC демонстрирует эксплойт для CVE-2024-42009, использующий уязвимость межсайтового скриптинга XSS для извлечения писем из целевого веб-почтового приложения. Атака внедряет вредоносную нагрузку, которая...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Межсайтовый скриптинг через /client/manage/ourphpout.php Продукты, затронутые CVE-2023-30212 : Вендор| Продукт| Версия ---|---|---...

test-xss-swagger-CVE-2019-1749

В этом репозитории нет README...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-82488

A stored cross-site scripting vulnerability in the Beetel 450TC3 router (firmware 01.00.00_01 ) is triggered by manipulating the Username argument in the User Management component. An attacker with low privileges and requiring user interaction can execute scripts in a victim's browser, leading to...

CVE-2026-82488 Beetel 450TC3 User Management cross site scripting

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2026-68180

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

EUVD-2026-68170

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

CVE-2026-82483

CVE-2026-82483 affects Coppermine Photo Gallery versions up to 1.6.28 . The vulnerability is a cross-site scripting (XSS) flaw in the Hidden Album Update Endpoint , specifically in the file db_input.php. An attacker with low privileges can remotely manipulate input to inject malicious scripts. A ...