1222270 matches found
CVE-2026-92358 Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking
A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...
CVE-2026-92358
Keycloak 's first broker login flow contains a flaw where a temporary proof created during a cross-browser account-linking request is not properly cleared after the link is established or manually removed. An attacker who controls the external identity can exploit this residual proof to silently ...
ZipCracker
ZipCracker ZipCracker is a simple but powerful password brute-force utility for cracking password-protected ZIP archives. It’s built with Qt and integrates a custom cracking engine, providing both CLI and GUI support. ⚡ Disclaimer: This tool is intended for educational purposes, recovery of your...
CVE-2025-70368
CVE-2025-70368 Cross-Site Scripting XSS Almacenado en la Funcionalidad de Actualizaciones de Proyecto...
CVE-2025-45407
CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: argo-workflows...
Kentico-Xperience-before-13.0.178---XSS-POC
This repository does not have a README...
CVE-2024-50803-Redaxo
CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A stored cross-site scripting XSS vulnerability was found in Redaxo versions 5.18.0, allowing attackers with sufficient privileges to upload a malicious SVG file through the mediapool feature. Published a write-up :...
CVE-2025-0133
설명: CVE-2025-0133에 대한 POC로, GlobalProtect 게이트웨이 또는 포털이 활성화된 PAN-OS 방화벽 구성에만 적용됩니다. 파일에서 입력받은 여러 URL에 대해 사용자 지정 스레드로 취약점 여부를 확인합니다. 타임아웃을 설정하고 결과를 파일로 저장할 수도 있습니다. 사용 예시: MacBook-Wiseep-Dev:github root python3.9 CVE-2025-0133.py -h usage: CVE-2025-0133.py -h --file FILE --thread THREAD --timeout...
CVE-2026-92214
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-chat-canvas. Executing a manipulation can lead to cross site...
CVE-2023-36158
CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
CVE-2026-92214
CVE-2026-92214 affects a2ui-project a2ui versions up to 0.10.7 , specifically the file sanitizer-markdown-renderer-service.ts within the a2a-chat-canvas Angular component. The vulnerability is a Cross-Site Scripting (XSS) flaw in an unknown function of that service. A remote attacker with low pri...
EUVD-2026-80059
Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wanconfigsetcgi, wannumsetcgi, and lanipchangecgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration...
CVE-2020-8559
Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...
CVE-2019-12543
CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 PurchaseRequest.do의 XSS 취약점 정보 설명: Zoho ManageEngine ServiceDesk Plus 9.3에서 문제가 발견되었습니다. PurchaseRequest.do serviceRequestId 매개변수를 통한 XSS가 존재합니다. 작성자: Tarantula 팀의 Concobe - VinCSS Vingroup의 구성원 페이로드...
CVE-2023-36884-Checker
CVE-2023-36884-Checker CVE-2023-36884 하드닝 적용 여부를 확인하는 스크립트 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 목표 이 스크립트는 Microsoft 하드닝 권장 사항이 올바르게 적용되었는지 확인합니다. Microsoft는 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 에서 다음과 같이 설명합니다: root@kitploit: Add th...
CVE-2019-12542
CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SearchN.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. Author: Concobe of Tarantula Team - VinCSS a member of Vingroup...
CVE-2019-12949
CVE-2019-12949 pfSense 2.4.4-p2 및 2.4.4-p3에서 크로스 사이트 스크립팅 취약점을 통한 원격 코드 실행까지 정보 설명: pfSense 2.4.4-p2 및 2.4.4-p3에서, 인증된 관리자를 속여 피싱 페이지의 버튼을 클릭하게 할 수 있다면, 공격자는 dingcommand.php와 rrdfetchjson.php를 통해 서버에 임의의 실행 코드를 업로드할 수 있습니다. 그런 다음 원격 공격자는 해당 서버에서 루트 권한으로 모든 명령을 실행할 수 있습니다. 연구자: The Tarantula Team의...
Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46069 익스플로잇 제목: Vehicle Service Management System - 'Mechanic List' 저장형 크로스 사이트 스크립팅 XSS 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM 참고 자료: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...