CVE-2025-63441

CVE-2025-63441 Title: Reflected XSS via arbitrarily supplied URL parameter param at endpoint u/administrator/friends Summary: A Reflected Cross-Site Scripting XSS vulnerability was identified in the u/administrator/friends endpoint of the OSSN application. This vulnerability allows attackers to...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creando-un-entorno-Docker-vulnerable-CVE-2023-30212- Descarga los archivos de mi repositorio usando git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git ahora para configurar la imagen docker Creando la imagen docker usa el comando sudo...

CVE-2022-32118

CVE-2022-32118 - Arox-XSS Existen vulnerabilidades de Cross Site Scripting XSS almacenado y reflejado en múltiples páginas de la aplicación Arox School ERP Pro, incluida la página de inicio de sesión, que permiten la ejecución arbitraria de comandos JavaScript. La aplicación tiene muchos más...

CVE-2025-0133

Escáner de Vulnerabilidad CVE-2025-0133 Una herramienta de escaneo automatizado basada en Bash para detectar la vulnerabilidad CVE-2025-0133 de XSS Reflejado en Palo Alto GlobalProtect Gateway & Portal usando nuclei y shodanx. Autor : Fecha : 2025-06-23 Severidad : Media CVE ID : CVE-2025-0133 Ti...

CVE-2024-48197

CVE-2024-48197 Reflected XSS in AudioCodes MP-202b Description Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface. Additional Information N/A Vulnerability Type Cross Site Scripting XSS Reflected...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS

CVE-2025-63915 Target:https://www.html-js.cn Github:https://github.com/doramart/DoraCMS Version:V2.1.8 Vulnerability Name:Reflected Cross-Site Scripting XSS Vulnerability in DoraCMS V2.1.8 CWE-79 Vulnerability Type: Reflected Cross-Site Scripting Reflected XSS Discovery Date: 2025-10-17...

CVE-2023-29808

Exploit Title: Reflected Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29808 Description: The...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 es una vulnerabilidad XSS reflejado en Wonder CMS que permite ejecutar código arbitrario a través de un script malicioso mediante el componente installModule. Uso Ejecutando el exploit contra la loginURL del objetivo, especificando nuestra IP y puerto para el servido...

CVE-2025-65270

CVE-2025-65270 ⚠️ Disclaimer This repository is for educational and defensive security research only 🔥 Overview Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3 , allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's...

CVE-2025-69606-GSVoIP-XSS

CVE-2025-69606 — XSS Reflejado en el Panel Web de GSVoIP Severidad: Media | CWE: CWE-79 | Auth Requerida: No | Vector: Remoto Resumen Se identificó una vulnerabilidad de Cross-Site Scripting XSS Reflejado en el Panel Web de GSVoIP v2.0.90. El parámetro msg del endpoint de error no sanitiza la...

CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS

CVE-2025-63735 – Reflected XSS in Ruckus Unleashed 200.13.6.1.319 Summary A reflected cross-site scripting XSS vulnerability exists in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp. Vendor Ruckus Wireless Product...

CVE-2025-66850

Finding Within the ‘LibreNMS’ application, we discovered a reflected Cross-Site Scripting vulnerability; this vulnerability exists in the routing module’s protocol parameter, allowing an attacker to render malicious JavaScript in a victim’s browser. This vulnerability affects all versions from...

CVE-2025-64027

Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT operations teams. It is actively maintained and updated frequently. Summary A...

CVE-2026-4637

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

CVE-2026-4637

Paessler PRTG Network Monitor (versions before 26.2.120.1449 ) is vulnerable to a reflected Cross-Site Scripting (XSS) flaw. The issue occurs because the web interface returns an HTTP 403 "Forbidden Path" error page for non-existent resources ending in ".htm" and echoes the requested URL path int...

EUVD-2026-85840

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790

CVE-2025-65790 - FuguHub 8.1 Reflected SVG XSS Reflected Cross-Site Scripting XSS via SVG Rendering in FuguHub https://vulners.com/cve/CVE-2025-65790 This repository documents a Reflected Cross-Site Scripting XSS vulnerability in FuguHub 8.1 , where SVG files containing inline JavaScript are...

CVE-2025-0133

CVE-2025-0133 CVE-2025-0133 Exploit CVE-2025-0133 is a reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software. An authenticated user with access to the Captive Portal can be tricked into clicking a specially crafte...

CVE-2026-29971

CVE-2026-29971 An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation. CVE-2026-29971 Vulnerability Reflected Cross-Site Scripting XSS Affected Product WebFileSys Affected Version 2.31.1 Description A reflected...