8 matches found
lblfixer_cve_2023_28447
LabelGrup Networks, 공식 PrestaShop 파트너 PrestaShop 1.7.X를 위한 모듈로 CVE-2023-28447 취약점 Smarty JavaScript XSS을 수정합니다. 자세한 정보는 다음 링크를 확인하세요: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-28447 GitHub: https://github.com/smarty-php/smarty/security/advisories/GHSA-7j98-h7fp-4vwj 지침: 1. 이 저장소에서 최신 릴리스를...
xssor2
XSS'OR XSS'OR - JavaScript로 해킹하세요. 온라인 한번 사용해 볼 수 있습니다: https://xssor.io 및 http://xssor.io/ 여기에는 Encode/Decode, Codz, Probe의 세 가지 주요 모듈이 포함되어 있습니다. 설치 Python 3 및 Django 3.0. 또는 Python 2 및 Django 1.11. https://github.com/evilcos/xssor2 저장소를 git clone 하거나 직접 다운로드하세요 cd xssor2 xssor/payload/probe.js...
EUVD-2021-15672
Malware in sbrugna...
CVE-2025-52552 FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to...
CVE-2025-1024
A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting XSS in the EditEventAttendees.php page. This requires Administration privileges and affects the EID parameter. The flaw allows an attacker to...
Pi-hole Web Interface < 5.4 Multiple Vulnerabilities
The Pi-hole Web Interface previously AdminLTE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2020-5267
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2...
Unfixed XSS vulnerability at www.joereiss.net
Security researcher Kn0t, has submitted on 27/04/2011 a cross-site-scripting XSS vulnerability affecting www.joereiss.net, which at the time of submission ranked 2923685 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...