beyondtrust-cve-2026-1232

🔍 Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References:...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Kubernetes CronJob Suspended Execution via Time Manipulation Program Code YAML + Python exploit cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec: schedule: "0 2 " jobTemplate: spec:...

CVE-2021-45744

CVE-2021-45744 Exploit Title: Bludit 3.13.1 - TAGS Field Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45744...

CVE-2021-46078

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References:...

CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...

CVE-2026-27472-and-CVE-2026-27474

CVE-2026-27472 and CVE-2026-27474 CVSS-B 5.3 MEDIUM and CVSS-B 4.8 MEDIUM Blind SSRF in SPIP 4.4.8 Syndication Feature and stored XSS Explanations and more on my website PoC 1. Log in as an administrator. 2. Make sure that in the Site content configuration, Sites referencing and syndication is on...

CVE-2021-46069

CVE-2021-46069 Exploit Title: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46068

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...

CVE-2021-45745

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2021-46080

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...

CVE-2021-46070

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

CVE-2023-29489

CVE-2023-29489 The security vulnerability is recorded in the Common Vulnerabilities and Exposures CVE system. Specifically, this vulnerability is related to cPanel, a popular hosting management software. This flaw allows for cross-site scripting XSS attacks through specially crafted requests."...

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

CVE-2021-45744 Exploit Title: Bludit 3.13.1 - TAGS Field Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45744...

CVE-2025-0133

CVE-2025-0133 Vulnerability Scanner A Bash-based automated scanner tool for detecting the CVE-2025-0133 Reflected XSS vulnerability in Palo Alto GlobalProtect Gateway & Portal using nuclei and shodanx. Author : Date : 2025-06-23 Severity : Medium CVE ID : CVE-2025-0133 Vulnerability Type :...

Exploit-Medium-CVE-2021-41184

Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS in the of option of the .position util 1. jQuery ui version v1.12.1 vulnerable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Concept...

Thruk-CVE-2023-34096

Thruk-CVE-2023-34096 Thruk Monitoring Web Interface versions = v3.06 are vulnerable to CVE-2023-34096 Path Traversal. The current exploit is made in Python 3 and exploits the vulnerability to upload a PoC file to multiple Thruk's common folders and also some Linux folders. CVSS The CNA GitHub, In...