185803 matches found
CVE-2025-45778
CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...
CVE-2024-5420-XSS
Descripción Se encontró una vulnerabilidad en utnserver Pro, utnserver ProMAX e INU-100 en la versión 20.1.22 y anteriores, que afecta al parámetro de descripción del dispositivo en la interfaz web. Esta falla permite un ataque de cross-site scripting almacenado XSS, permitiendo a los atacantes...
writeups
This repository does not have a README...
Ghidra_v810_v830
Módulo de descripción de procesador Ghidra para las familias NEC/Renesas v810 y v830 Estos módulos se crearon tomando los módulos v850 que vienen con Ghidra como plantilla y reescribiéndolos para que funcionen con las instrucciones de las familias v810 y v830. 1. Descripción de V810 basada en...
CVE-2021-3156
Este repositorio no tiene un README...
CVE-2021-39287-Stored-XSS
CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS A stored Cross Site Scripting XSS vulnerability exists within TastyIgniter v3.0.7 Restaurant CMS. The description input field, located in /admin/locations/settings is not properly sanitized, and allows...
ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
CVEs
This repository does not have a README...
CVE-2018-10933
This repository does not have a README...
CVE-2025-8191
CVE-2025-8191 – Swagger UI XSS Injection Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE‑2025‑8191, a vulnerability found in Swagger UI. The vulnerability allows Cross‑Site Scripting XSS injection in the “description” field, leading to remote script execution under...
diaggetroot
This repository does not have a README...
sharesniffer
sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...
vmware_vcenter_cve_2020_3952
Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...
CVE-2026-48543
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form...
CVE-2023-34838
CVE-2023-34838 — eScan Management Console Stored XSS Overview Microworld Technologies eScan Management Console version 14.0.1400.2281 is vulnerable to a Stored Cross-Site Scripting XSS attack. An authenticated attacker with access to the role management feature can inject a malicious script into...
CVE-2026-48543
Krayin CRM versions through 2.2.6 are vulnerable to a stored client-side template injection leading to Cross-Site Scripting (XSS) . The vulnerability exists in the web form description field , where an authenticated attacker can inject Vue.js template expressions using double-brace syntax. When p...
EUVD-2026-86448
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form...
CVE-2026-48543 Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form...