Lucene search
+L

649 matches found

Kitploit
Kitploit
added 2026/09/12 10:14 a.m.8 views

owasp-java-encoder

OWASP Java Encoder Project Contextual Output Encoding is a computer programming technique necessary to stop Cross-Site Scripting. This project is a Java 1.8+ simple-to-use drop-in high-performance encoder class with little baggage. For more detailed documentation on the OWASP Java Encoder please...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/12 8:13 a.m.880 views

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/12 5:32 a.m.13 views

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...

5.4CVSS5.9AI score0.00173EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.12 views

YesWiki Archived Revision - Cross-Site Scripting

YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append an XSS payload after a valid revision timestamp. id: CVE-2026-52773 info: name: YesWiki...

6.1CVSS5.8AI score0.00478EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.81 views

SuperWebMailer - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 that allows keepalive.php XSS via a GET parameter. id: CVE-2023-38194 info: name: SuperWebMailer - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 that allows...

6.1CVSS6.3AI score0.01131EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.107 views

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

6.1CVSS6.3AI score0.01107EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.58 views

EyouCms v1.6.2 - Cross-Site Scripting

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet. id: CVE-2023-41597 info: name: EyouCms v1.6.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: | EyouCms v1.6.2 was discovered to...

6.1CVSS6.1AI score0.01224EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:10 a.m.7 views

WSO2-2021-1261

WSO2-2021-1261: Multiple Cross-Site Scripting in WSO2 ESB Due to improper output encoding, multiple Cross Site Scripting XSS attacks have been identified in WSO2 ESB. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here. Why no CVE? Neither me nor the vendor...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 10:58 p.m.6 views

cve-2025-31651

CVE-2025-36701 — Apache Tomcat - Rewrite rule bypass Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-02-28 Affected Vendor: Apache Affected Product: Tomcat 9.0.x / 10.1.x / 11.0.x Severity: Critical / High CWE: CWE-116 Status: Under Review / Fixed / Public ✅ / Private...

9.8CVSS7.3AI score0.04047EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 1:39 a.m.7 views

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Description A reflected cross-site scripting XSS vulnerability exists in /dashboard/settings.php in Bank Management System in Web 1.0. The vulnerability occurs due to improper sanitization of user-supplied input in the msg GET parameter. An attacker can craft a...

5.9AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87550

Improper encoding or escaping of output in CSS in Google Chrome prior...

4.3CVSS0.00242EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 2:34 a.m.9 views

CVE-2025-65300

CVE-2025-65300 描述 CVE-2025-65300:Coohom SaaS 平台中的存储型跨站脚本(XSS)漏洞 披露日期:2025-10-28 最后更新:2025-10-28 报告者:Phisit Pupiw 厂商:Coohom CWE:CWE-79 – 跨站脚本 摘要 在 Coohom SaaS 平台的“账户设置 → 个人资料 → 地址”模块中发现了一个存储型跨站脚本(XSS)漏洞。存储在“城市”、“州/省”和“国家/地区”字段中的用户输入在未进行适当清理或上下文相关输出编码的情况下被渲染回客户端。 攻击者可以存储恶意 JavaScript...

5.4CVSS5.8AI score0.00199EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 1:22 a.m.7 views

CVE-2025-63588

CVE-2025-63588 CMSimpleXH cmsimplexh 路径处理中的反射型跨站脚本(XSS)漏洞 预估 CVSS v3.1 评分: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1(中危) 分配的 CVE: CVE-2025-63588 受影响产品: CMSimpleXH - 1.8 厂商: CMSimpleXH - https://www.cmsimple-xh.org/ 摘要 CMSimpleXH 处理动态登录相关输入的前端路由解析代码中存在一个反射型跨站脚本(XSS)漏洞。该应用程序将从请求 URI...

7.1CVSS5.9AI score0.00335EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/09/07 10:30 p.m.7 views

EUVD-2026-72538

Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...

6.3CVSS6AI score0.00378EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 7:16 a.m.9 views

CVE-2026-37196

CVE-2026-37196 – Stored Cross-Site Scripting XSS in nirix traq v3.9.0 Overview A Stored Cross-Site Scripting XSS vulnerability exists in nirix traq v3.9.0 , where user-supplied input in the ticket description field is improperly sanitized before being rendered in the application interface. This...

5.8AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 4:52 p.m.6 views

CVE-2025-52097

CVE-2025-52097 – Reflected XSS in InstantForum.NET v4.1.4 This repository contains the public advisory, proof of concept, and supporting materials for CVE-2025-52097 , a reflected cross-site scripting XSS vulnerability identified in InstantForum.NET v4.1.4. Summary Product: InstantForum.NET v4.1....

5.8AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/06 1:39 p.m.5 views

CVE-2025-25461

📌 CVE-2025-25461 - Cross-Site Scripting XSS Almacenado en SeedDMS 6.0.29 📝 Descripción Existe una vulnerabilidad de Cross-Site Scripting XSS Almacenado en SeedDMS 6.0.29. Un usuario o administrador malintencionado con el permiso "Add Category" puede inyectar un payload XSS malicioso en el campo d...

5.4CVSS5.9AI score0.00507EPSS
SaveExploits3References1
CVE
CVE
added 2026/08/28 7:24 p.m.23 views

CVE-2026-76798

The MongoSQL Transition Readiness Tool (part of MongoDB's SQL/BI Connector stack) writes query text and user names from BI Connector log files into its generated HTML reports without encoding them for the HTML output context. An attacker with low privileges who can issue queries through the BI Co...

6.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/28 7:24 p.m.51 views

CVE-2026-76798 MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

6.9CVSS0.00204EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/08/28 7:24 p.m.12 views

MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

6.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder