Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/28 1:00 p.m.•28 views

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

6.1CVSS6.3AI score0.00333EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/27 1:16 p.m.•29 views

CVE-2025-65321

CVE-2025-65321 The Language Sloth Discord bot is vulnerable to Directory Traversal in the gif and png functions. The functions build file paths using unsanitized user input for the 'name' parameter, allowing attackers to reference files outside the intended resource directories. The functions "gi...

6.3AI score
SaveExploits3
Packet Storm
Packet Storm
•added 2025/12/04 12:00 a.m.•252 views

📄 Discord Language Sloth Bot Directory Traversal Scanner / Payload Generator

The Language Sloth Discord bot contains a critical directory traversal vulnerability allowing attackers to read arbitrary files on the server hosting the bot through improperly sanitized user input in file path operations. This is an automated scanner with payload generation...

7.5CVSS7.5AI score0.01612EPSS
SaveExploits4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-23374

Malicious code in bioql PyPI...

6.1CVSS5.8AI score0.00333EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/08/03 2:14 p.m.•31 views

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/08/01 5:15 p.m.•19 views

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•9 views

CVE-2025-45778: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/01 12:00 a.m.•44 views

CVE-2025-45778

The Language Sloth Web Application v1.0 is affected by a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Description text field, specifically when creating a new project. Once the payload is injected, i...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•43 views

PT-2025-31655

Name of the Vulnerable Software and Affected Versions The Language Sloth Web Application version 1.0 Description A stored cross-site scripting XSS vulnerability exists in The Language Sloth Web Application. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/08/01 12:00 a.m.•11 views

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

6.2AI score0.00333EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•19 views

Language Sloth Web Application Security Vulnerabilities

Language Sloth Web Application is a web page application from Language Sloth, Inc. A security vulnerability exists in Language Sloth Web Application version 1.0, which originates from stored cross-site scripting and allows an attacker to execute arbitrary web script or HTML by injecting a special...

6.1CVSS6.2AI score0.00333EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2025/07/11 12:00 a.m.•126 views

📄 The Language Sloth Web Application 1.0 Cross Site Scripting

The Language Sloth Web Application version 1.0 suffers from a cross site scripting vulnerability. CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrar...

6.1CVSS5.1AI score0.00333EPSS
SaveExploits1
Rows per page
Query Builder