1221851 matches found
Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC
Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...
CVE-2024-4367-Analysis
CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js Overview CVE-2024-4367 is a critical vulnerability in the PDF.js library that allows arbitrary JavaScript execution in a user's browser, leading to Cross-Site Scripting XSS attacks. This affects Firefox Example: python3 poc.py "alert1" Demo...
CVE-2024-48392-PoC
Exploit de CVE-2024-48392 Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-48392, una vulnerabilidad XSS descubierta en Orangescrum auto-alojado así como en la versión premium. ID de CVE: CVE-2024-48392...
bluez
BlueZ - Bluetooth protocol stack for Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Compilation and installation In order to compile Bluetooth utilities you need followin...
SimpleRemoter
SimpleRemoter 简体中文 | 繁體中文 | English !WARNING Important Legal Notice This software is intended solely for educational purposes and authorized use cases such as: Remote IT administration within your own organization Authorized penetration testing and security research Personal device management and...
CVE-2024-34716
CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...
goblin
libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml root@kitploit: dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy,...
PacketSender
Introducción Lea esto en otros idiomas:English, Español, Deutsch, Français. italiano, 简体中文 Packet Sender es una utilidad de código abierto que permite enviar y recibir paquetes TCP, UDP y SSL TCP encriptado, así como peticiones HTTP/HTTPS y generación de paneles. La rama mainline soporta...
CVE-2019-1218
CVE-2019-1218 Outlook iOS Spoofing Vulnerability I discovered XSS in IOS Outlook Mobile Application. A severe vulnerability in Microsoft Outlook for IOS that could allow an attacker to takeover a victim’s device. The security issue could enable a malicious actor to execute a cross-site scripting...
EUVD-2026-78221
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...
xurlfind3r
xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...
SASM
SASM SimpleASM - простая кроссплатформенная среда разработки для языков ассемблера NASM, MASM, GAS, FASM с подсветкой синтаксиса и отладчиком. В SASM Вы можете легко разрабатывать и выполнять программы, написанные на языках ассемблера NASM, MASM, GAS, FASM. Вводите код в форму и запускайте...
CVE-2026-90845
CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...
EUVD-2026-78231
A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...
ghostsplice
GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...
PETriage
PETriage Una herramienta rápida y multiplataforma de análisis superficial de PE Portable Executable para el triaje de malware, escrita en Rust. Diseñada para analistas que necesitan un triaje práctico de PE en Linux, macOS y Windows sin depender de un flujo de trabajo exclusivo de Windows...
CVE-2024-51032
CVE-2024-51032 Description A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. Vulnerability Type Cross Site Scripting XSS Vendor of Product...
CVE-2024-51435
bloodbank A simple csrf poc found on blood bank system v 1.0...
zen-desktop
Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...