Citrix StoreFront - Cross-Site Scripting

Reflected Cross-Site Scripting issue which is exploitable without authentication. This vulnerability was exploitable through coercing an error message during an XML parsing procedure in the SSO flow. id: CVE-2023-5914 info: name: Citrix StoreFront - Cross-Site Scripting author: DhiyaneshDK...

WP Helper Lite < 4.3 - Cross-Site Scripting

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. id: CVE-2023-0448 info: name: WP Helper Lite 4.3 - Cross-Site Scripting author: ritikchaddha severity: medium description: | T...

mojoPortal 2.7.0.0 - Cross-Site Scripting

mojoPortal 2.7.0.0 contains a cross-site scripting vulnerability in the FileDialog.aspx component, which can allow an attacker to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters. id: CVE-2023-24322 info: name: mojoPortal 2.7.0.0 - Cross-Site...

Linear eMerge E3 - Cross-Site Scripting

Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. id: CVE-2019-7255 info: name: Linear eMerge E3 - Cross-Site Scripting author: arafatansari severity: medium description: | Linear eMerge E3-Series devices are vulnerable to cross-site scripting via...

Traccar - Unrestricted File Upload

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...

Bank Locker Management System - Cross-Site Scripting

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

1CRM-CVE

1CRM-CVE 1CRM Software-Schwachstelle Schwachstellenliste CVE-2019-14221: Gespeichertes Cross-Site-Scripting...

CentOS-Control-Web-Panel-CVE

CentOS Control Web Panel Version 0.9.8.836 - 0.9.8.847 Am 29. Juni 2019 begann unser Team, Schwachstellen im CentOS Control Web Panel CWP Version 0.9.8.836 zu suchen, und wir fanden einige kritische Schwachstellen. Einige der von uns gefundenen Schwachstellen können zu einer Kette verbunden werde...

CVE-2026-27621

CVE-2026-27621：TypiCMS Core 存在存储型跨站脚本攻击（XSS），通过 SVG 文件上传 概述...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : 在线医生预约系统中的多个存储型XSS漏洞 在线医生预约系统V1.0中存在多个经身份验证的存储型跨站脚本漏洞 软件链接：https://www.sourcecodester.com/download-code?nid=14663&title=Online+Doctor+Appointment+System+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25791...

CVE-2026-24415

CVE-2026-24415 : OpenSTAManager affecté par une XSS dans modificaiva.php via le paramètre righe Vue d'ensemble...

XSSYA

XSSYA-V2.0 è stato rilasciato - vedi https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA è uno scanner per Cross Site Scripting e conferma di vulnerabilità funziona con due metodi • Metodo numero 1 per la conferma di richiesta e risposta • Metodo numero 2 per la conferma: esegue il payload...

CVE-2019-1218

CVE-2019-1218 Уязвимость спуфинга Outlook для iOS Я обнаружил XSS в мобильном приложении Outlook для IOS. Серьёзная уязвимость в Microsoft Outlook для IOS, которая может позволить злоумышленнику получить контроль над устройством жертвы. Эта проблема безопасности даёт злоумышленнику возможность...

CVE-2023-29489

CVE-2023-29489 La vulnérabilité de sécurité est enregistrée dans le système Common Vulnerabilities and Exposures CVE. Plus précisément, cette vulnérabilité concerne cPanel, un logiciel populaire de gestion d'hébergement. Cette faille permet des attaques de cross-site scripting XSS via des requête...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - toolchain de exploit XSS CSRF RCE PacketStorm WLB-2020080010 Aviso: este toolchain de exploit foi inspirado por EDB-ID 20009. Objetivo O objetivo deste toolchain de exploit é substituir o EDB-ID 20009. Vantagens deste toolchain sobre o exploit EDB-ID 20009:...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC di DNN Insufficient Access Control - Image Upload permette la sovrascrittura dei contenuti del sito Sono un uomo semplice, vedo cvss:10/10 e ci vado xD Ho visto questa nuova CVE CVE-2025-64095 DNN Insufficient Access Control - Image...

CVE-2024-56289

CVE-2024-56289 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Nome del componente WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg Versione vulnerabile = 3.7.3.2 Slug del componente groundhogg Link del componente...

XSSight

WARNUNG: Diese Seite dient ausschließlich zu Bildungszwecken. Jede böswillige Verwendung durch die Benutzer wird nach den gesetzlichen Bestimmungen bestraft! XSSight Cross-site Scripting XSS Cross-site Scripting XSS ist eine Angriffstechnik, bei der vom Angreifer bereitgestellter Code in die...