1931 matches found
CVE-2017-16568
CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...
CVE-2018-8062
CVE-2018-8062 Persistent XSS on Comtrend AR-5387un router Exploitation explanation: To exploit this vulnerability, once logged into the router, a WAN service must be created Click on "Advanced Setup", "WAN Service". "Add button", "Next" Then insert the payload into the "Enter Service Description"...
CVE-2019-17427
CVE-2019-17427 CVE-2019-17427 POC de XSS persistente En Redmine anterior a 3.4.11 y 4.0.x anterior a 4.0.4, existe XSS persistente debido a errores de formato de textile. La vulnerabilidad existe esencialmente en cualquier página wiki que, por defecto, utiliza formato textile. Puedes aprovecharla...
CVE-2017-16567
CVE-2017-16567 1. Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...
CVE-2023-28467
MyBB 1.8.33 XSS persistente en email del Panel de Control de Usuario root@kitploit: - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com Solución Actualiza MyBB a la versión 1.8.34 o superior...
CVE-2021-30146
CVE-2021-30146 Seafile 7.0.5 XSS Persistente Descripción sugerida: La aplicación versión del servidor: Seafile 7.0.5 es vulnerable a XSS persistente a través de la funcionalidad de compartir bibliotecas. Información adicional: Seafile es una solución de sincronización y uso compartido de archivos...
CVE-2019-13633
CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...
CVE-2020-13094
Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-04-14 Vendor: https://www.dolibarr.org/ Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSSv3 Base Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L, I:L,...
CVE-2019-18426
Divulgación de vulnerabilidades de WhatsApp - Redirección abierta + Bypass de CSP + XSS persistente + permisos de lectura del FS + potencial para RCE CVE-2019-18426 Artículo técnico Documentos originales de divulgación de vulnerabilidades...
CVE-2021-30109
CVE-2021-30109 Froala WYSIWYG Editor 3.2.6 se ve afectado por Cross Site Scripting XSS. Bajo ciertas condiciones, una cadena elaborada en base64 conduce a XSS persistente. Producto afectado: Froala WYSIWYG Editor - V3.2.6 Descripción: Bajo ciertas condiciones, una cadena elaborada en base64 condu...
CVE-2019-18426
Esto fue publicado originalmente en el Github oficial de la empresa PerimeterX a través de mi cuenta de Github de trabajo. Aunque este es mi trabajo, todos los derechos y asuntos legales pertenecen a la empresa PerimeterX. Divulgación de vulnerabilidades de WhatsApp - Open Redirect + Bypass de CS...
DRUPAL-CONTRIB-2026-140
This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...
CVE-2026-87928
MaxSite CMS versions 0.94 through 109.6 contain a stored cross-site scripting vulnerability in the admin_page upload handler . Any logged-in user can upload HTML files to the uploads/_pages/ directory containing malicious scripts that execute in visitors' browsers when accessed, enabling persiste...
EUVD-2026-75110
MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the adminpage upload handler that allows any logged-in user to upload HTML files. Attackers can upload HTML containing malicious scripts to the uploads/pages/ directory, which executes in visitors' browsers wh...
CVE-2025-63420
CVE-2025-63420 CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions. CWE CWE-79 — Improper Neutralization of Input During Web Page Generation Cross-site Scripting CVSS v3....
TYPO3-XSS-POC
TYPO3-XSS-POC Typo3 -v9.1.0 Persistent Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6905...
CVE-2026-23929
Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...
EUVD-2026-60734
Prototype pollution vulnerability in searchParamsToObject is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like proto, combined with jQuery's unsafe element creation that traversed the prototype chain...
PT-2026-76956
Name of the Vulnerable Software and Affected Versions Maps affected versions not specified Description A prototype pollution issue exists in the searchParamsToObject function. The processing of URL parameters fails to filter dangerous properties such as proto . When combined with unsafe element...
