CVE-2023-39144

CVE-2023-39144 Antecedentes Descubrí esta vulnerabilidad en mayo de 2023. Element55 produce software para oficinas legales para el seguimiento del tiempo. Este software extrae información de varias ubicaciones, como Exchange, SQL y Shoretel. Cronología 24 de mayo de 2023 - Reporté la vulnerabilid...

CVE-2025-44136

CVE-2025-44136 XSS no autenticado en MapTiler Tileserver-php v2.0. Descripción MapTiler Tileserver-php v2.0 es vulnerable a Cross Site Scripting XSS. El parámetro GET "layer" se refleja en un mensaje de error sin codificación HTML. Esto conduce a XSS y permite que un atacante no autenticado ejecu...

CVE-2018-5146

CVE-2018-5146 exp y poc poc.ogg : archivo poc construido por uno mismo cve-test2.html : archivo exploit crctest.exe: calcula el CRC32 del archivo ogg...

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Over View this is a PoC on the CVE-2025-22131 , a Cross-Site Scripting XSS vulnerability in PhpSpreadsheet versions prior to 2.2.2, 2.1.2, and 1.29.4. The vulnerability resides in the generateNavigation function, which fails to sanitize sheet...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Extensión de Joomla! : $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

Netsweeper 4.0.3 - Cross-Site Scripting

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. id: CVE-2014-9608 info: name: Netsweeper 4.0.3 - Cross-Site Scriptin...

Fortinet FortiOS <=5.2.3 - Cross-Site Scripting

Fortinet FortiOS 5.2.x before 5.2.3 contains a cross-site scripting vulnerability in the SSL VPN login page which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2015-1880 info: name: Fortinet FortiOS =5.2.3 - Cross-Site Scripting author: pikpikcu...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Exploit Author: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

CVE-2026-105086: Improper Neutralization of Input During Web Page Generation

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...

PT-2026-104641

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...

CVE-2026-11645

CVE-2026-11645 - V8 en Google Chrome anterior a Ejecución Remota de Código Uso Rápido python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notas de Explotación Gravedad: ALTA CVSS: 8.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-06-09 Resumen...

CVE-2020-11022-CVE-2020-11023

CVE-2020-11022 CVE-2020-11023 En versiones de jQuery mayores o iguales a 1.2 y anteriores a 3.5.0, pasar HTML de fuentes no confiables, incluso después de sanitizarlo, a uno de los métodos de manipulación del DOM de jQuery es decir, .html, .append y otros puede ejecutar código no confiable. Este...

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...

CVE-2026-64638

CVE-2026-64638 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

viber-desktop-html-injection

Viber Desktop — HTML Injection CVE-2025-55996 CVE: CVE-2025-55996 Discoverer: Thaw Khant Cycbake Product: Viber Desktop Affected: Viber Desktop 25.6.0 and possibly earlier Summary Viber Desktop's deep-link handler viber://forward?text= can render unsanitized HTML supplied in the text parameter...

CVE-2024-30956

CVE-2024-30956 Ver https://www.lauyan.com/en/toweb-updates.htmliyFEw37D Vulnerabilidad de inyección de HTML XSS basado en DOM en TOWeb versión 5 p. ej. http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navega a la URL y el código JS se ejecuta PD: src...