2496 matches found
CVE-2015-9251
CVE-2015-9251 This repository contains a Proof of Concept PoC for CVE-2015-9251, a vulnerability in jQuery versions prior to 3.0.0 that allows attackers to perform Cross-Site Scripting XSS attacks under certain conditions...
burp-exporter
Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...
CVE-2019-11358
CVE-2019-11358 Prototype Pollution A simple poc of prototype pollution that occurs in the jQuery's 3.4.0 extension method. The first argumentdeep in the extend method must be true...
seeker
Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...
cve-2020-11023-scanner
💥 CVE-2020-11023 Scanner: Find and Conquer XSS Before It's Too Late! 💥 Are you haunted by the specter of Cross-Site Scripting XSS vulnerabilities lurking in your JavaScript code? Worried about CVE-2020-11023 leaving your web applications open to attack? Fear no more! The CVE-2020-11023 Scanner is...
Odoo Apps - Cross-Site Scripting via Prototype Pollution
jquery-bbq 1.2.1 contains a prototype pollution caused by improperly controlled modification of object prototype attributes, letting malicious users inject properties into Object.prototype, exploit requires malicious user interaction. id: CVE-2021-20086 info: name: Odoo Apps - Cross-Site Scriptin...
WordPress JS Archive List <= 6.1.5 - SQL Injection
Miguel Useche JS Archive List contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2025-54726 info: name: WordPress JS Archive List = 6.1.5 - SQL Injection author:...
WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion
WordPress Delightful Downloads Jquery File Tree versions 2.1.5 and older are susceptible to local file inclusion vulnerabilities via jqueryFileTree. id: CVE-2017-1000170 info: name: WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion author: dwisiswant0 severity: high...
jquery-cve-2022-31160
es-define-property Object.defineProperty, but not IE 8's broken one...
CVE-2025-34100-demo
CVE-2025-34100 演示 演示 Web 服务器 !NOTE 请注意，此处仅为网站的 PHP 文件，为了更好地理解 CVE 并创建更有效的 PoC，请访问 https://nvd.nist.gov/vuln/detail/CVE-2025-34100 这些文件不会导致 CVE 的产生，而是利用该 CVE 的入口点。该 CVE 存在于 CMS 中。 请将文件放置如下： root@kitploit: /var/www/html/biteinstall/ ├── index.php ├── pages │ ├── about.php │ ├── home.php │ ├──...
https-nj.gov---CVE-2020-11023
https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...
Exploit-Medium-CVE-2021-41184
Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS in the of option of the .position util 1. jQuery ui version v1.12.1 vulnerable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Concept...
https-nj.gov---CVE-2018-14041
https-nj.gov---CVE-2018-14041 Vulnearability Report of the New Jersey official site The data-target attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix for this specific issue could be changing getTargetFromTrigger function. return $target to: return...
cve-2020-11023-demonstration
Jquery XSS - CVE-2020-11023 This is a demonstration of reproducing CVE-2020-11023. Source is mainly from this blog post. Reproduce Install npm dependencies with npm install, jQuery 3.4.1 is included as a dependency. Run the project with for example live server for vs code. The site contains two...
Jquery-File-Tree-1.6.6-Path-Traversal
Jquery-File-Tree-1.6.6-Path-Traversal Exploit de Path Traversal de Jquery File Tree 1.6.6 CVE-2017-1000170 La configuración predeterminada del plugin jQueryFileTree This will search for all .zip and .sql files inside victim.com/backup/admin and its subpaths You must provide the dot to indicate it...
https-nj.gov---CVE-2019-11358
https-nj.gov---CVE-2019-11358 新泽西州官方网站漏洞报告 jQuery 3.4.0 之前的版本（如 Drupal、Backdrop CMS 及其他产品中使用）由于 Object.prototype 污染，错误处理了 jQuery.extendtrue, , ...。如果未清理的源对象包含可枚举的 proto 属性，则可能扩展原生的 Object.prototype。 建议 src/core.js...
JQueryingU
JQueryingU NOTAS: El código base de detección del lado del cliente fue creado por Christian Ludwig https://jsfiddle.net/ChristianL/AVyND/, y fue utilizado por APT 29 en 2016. APT 29 modificó la ventana emergente para que fuera una solicitud POST y la usó durante una campaña de seguimiento en...
CVE-2018-16492
Node.js 的 extend 方法 node-extend 是 jQuery 经典 extend 方法的移植版本。它的行为完全符合预期，简单、久经考验且可靠。 注意事项： 对于 Node.js = 4， Object.assign 现已原生提供相同的功能（但不包括“深拷贝”选项）。 请参阅 ECMAScript 2015 ES6 in Node.js。 某些 Node.js 和众多浏览器中（因为 NPM 模块也适用于浏览器）对 Object.assign 的原生实现可能不完全是规范兼容的。 请查看 object.assign 模块以获取兼容的候选方案。 安装 本包通过 npm...
CVE-2020-11022-CVE-2020-11023
CVE-2020-11022 CVE-2020-11023 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuer...