12860 matches found
WebKit HTMLSelectElement Use-After-Free Exploit
WebKit use-after-free in HTMLSelectElement There is a use-after-free in HTMLSelectElement. If the length of the HTMLSelectElement is set to a value greater than the existing options length then dummy HTMLOptionElements elements are created. These HTMLOptionsElements are stored as raw pointers in...
Exploit for Improper Restriction of XML External Entity Reference in Wordpress
CVE-2021-29447 Proof of Concept Proof of Concept for CVE-2021...
Unauthenticated stored XSS via username & name parameters
There is a stored XSS vulnerability due to improper sanitization of usernames. Vulnerable code User.php line 532: php public function isValidLoginstring $login: bool $login = string$login; if strlen$login loginMinLength || !pregmatch$this-validUsername, $login $this-errors =...
Exploit for Server-Side Request Forgery in Apache Solr
CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC...
reCAPTCHA <= 1.6 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC 1. On the setting page of this plugin, enter...
PT-2022-21679 · Undefined · Undefined
"Source": "https://t.me/documentors", "Content": "CVE-2022-33679.zip 1.2 MB 🔥🔥🔥CVE-2022-33679Windows Kerberos Elevation of Privilege - PoC exploit usage: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName", "author": "⚓️𝔇𝔬𝔠𝔲𝔪𝔢𝔫𝔱𝔬𝔯", "Detection Date": "04 Nov 2022", "Type": "Data...
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. The PoC will be displayed once the issue has been...
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC The PoC will be displayed once the issue has...
Stored XSS and HTML injection from markdown
Description Stored XSS, also known as persistent XSS, is the more damaging of the XSS. It occurs when a malicious script is injected directly into a vulnerable web application. Due to a sanitization problem it is possible to perform both a Stored XSS and an HTML injection. Thanks to this attack i...
Unrestricted File Upload
BigBlueButton 2.5.6 is vulnerable to unrestricted file upload, where the insertDocument API call does not validate the given file extension before saving the file, and does not remove it in case of validation failures. PoC: 1- Submit the request to insertDocument, specifying the extension:...
Video Thumbnails <= 2.12.3 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC Put the following payload in the "Custom Fiel...
Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in any text field of Settings Salat Times: " Save, and the XSS will be...
Exploit for Path Traversal in Apache Http_Server
PoC exploit for CVE-2021-41773, an Apache HTTP Server 2.4.49 and...
Exploit for Server-Side Request Forgery in Apache Batik
Apache Batik SSRF to RCE Jar Exploit Component link https...
Exploit for Improper Verification of Cryptographic Signature in Passport-Saml_Project Passport-Saml
Exploiting CVE-2022-39299 Signature bypass via multiple ro...
Event Monster < 1.2.1 - Admin+ SQLi
The plugin does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users PoC...
Html Injection Stored in edit customers
Description HTML Injection is a vulnerability in which the attacker can inject malicious html content in the webpage. Proof of Concept 1. Open tab Edit Customers, click Edit customer 2. Inject this payload at field Name: TEST TEST TEST. And then click Save 3. Go to the profile page of this...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 aka text4shell PoC for recently discovered vu...