1125297 matches found
Bank Locker Management System - Cross-Site Scripting
A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...
WSO2 - Cross-Site Scripting
WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...
Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting
Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...
1CRM-CVE
1CRM-CVE 1CRM Software-Schwachstelle Schwachstellenliste CVE-2019-14221: Gespeichertes Cross-Site-Scripting...
CentOS-Control-Web-Panel-CVE
CentOS Control Web Panel Version 0.9.8.836 - 0.9.8.847 Am 29. Juni 2019 begann unser Team, Schwachstellen im CentOS Control Web Panel CWP Version 0.9.8.836 zu suchen, und wir fanden einige kritische Schwachstellen. Einige der von uns gefundenen Schwachstellen können zu einer Kette verbunden werde...
CVE-2021-25791-Multiple-Stored-XSS
CVE-2021-25791-Multiple-Stored-XSS : 在线医生预约系统中的多个存储型XSS漏洞 在线医生预约系统V1.0中存在多个经身份验证的存储型跨站脚本漏洞 软件链接：https://www.sourcecodester.com/download-code?nid=14663&title=Online+Doctor+Appointment+System+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25791...
XSSYA
XSSYA-V2.0 è stato rilasciato - vedi https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA è uno scanner per Cross Site Scripting e conferma di vulnerabilità funziona con due metodi • Metodo numero 1 per la conferma di richiesta e risposta • Metodo numero 2 per la conferma: esegue il payload...
CVE-2019-1218
CVE-2019-1218 Уязвимость спуфинга Outlook для iOS Я обнаружил XSS в мобильном приложении Outlook для IOS. Серьёзная уязвимость в Microsoft Outlook для IOS, которая может позволить злоумышленнику получить контроль над устройством жертвы. Эта проблема безопасности даёт злоумышленнику возможность...
CVE-2023-29489
CVE-2023-29489 La vulnérabilité de sécurité est enregistrée dans le système Common Vulnerabilities and Exposures CVE. Plus précisément, cette vulnérabilité concerne cPanel, un logiciel populaire de gestion d'hébergement. Cette faille permet des attaques de cross-site scripting XSS via des requête...
Atmail-exploit-toolchain
AtMail Email Server Appliance 6.4 - toolchain de exploit XSS CSRF RCE PacketStorm WLB-2020080010 Aviso: este toolchain de exploit foi inspirado por EDB-ID 20009. Objetivo O objetivo deste toolchain de exploit é substituir o EDB-ID 20009. Vantagens deste toolchain sobre o exploit EDB-ID 20009:...
CVE-2024-56289
CVE-2024-56289 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Nome del componente WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg Versione vulnerabile = 3.7.3.2 Slug del componente groundhogg Link del componente...
XSSight
WARNUNG: Diese Seite dient ausschließlich zu Bildungszwecken. Jede böswillige Verwendung durch die Benutzer wird nach den gesetzlichen Bestimmungen bestraft! XSSight Cross-site Scripting XSS Cross-site Scripting XSS ist eine Angriffstechnik, bei der vom Angreifer bereitgestellter Code in die...
Bolt-CMS-3.6.2---Cross-Site-Scripting
Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prova di concetto Per sfruttare la vulnerabilità, Bolt CMS 3.6.2 consente XSS tramite l'input di testo facendo clic sul pulsante di...
Craft-CMS-3.0.25---Cross-Site-Scripting
Craft-CMS-3.0.25 - Cross-Site-Scripting Craft CMS 3.0.25 - Vulnerabilità Cross-Site Scripting CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 Prova di concetto Consente di eseguire un attacco Cross-Site Scripting salvando un nuovo titolo dalla scheda della console. root@kitploit: POST...
react16-ssr
CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 Ein einfacher PoC zur Reproduktion einer XSS-Schwachstelle Schritte npm i npm run start Gehe zu localhost:3006...
CVE-2021-39476
CVE-2021-39476 Mehrere XSS-Schwachstellen in PhoenixCart 1.0.8.0 gefunden 2x XSS auf derselben Seite "Titel der Kategorie für SEO bearbeiten:" "Beschreibung der Kategorie bearbeiten" Link: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...
CVE-2019-8331
Eng Descrição O CVE-2019-8331 é uma vulnerabilidade de segurança do tipo Cross-Site Scripting XSS encontrada no Bootstrap, uma biblioteca JavaScript amplamente utilizada no desenvolvimento de sites e aplicações móveis. Essa vulnerabilidade ocorre pois o Bootstrap não filtra adequadamente os dados...
CVE-2020-16270
CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...
weaponised-XSS-payloads
Payload XSS armati Payload XSS progettati per trasformare alert1 in P1. Il Post del Blog Questa repo è stata rilasciata insieme a un post del blog intitolato "Come Elevare i Tuoi Bug XSS da Medium a Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 Cos'è quest...