CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - Cross-Site Scripting XSS refletido Descrição: Existe uma vulnerabilidade de XSS refletido no endpoint /admin?page=media no parâmetro file, permitindo que um invasor injete código JavaScript arbitrário. Passos para explorar: 1. Faça login no CMS e navegue até a pági...

CVE-2025-6563

Sicherheitshinweis zu Reflected XSS in der MikroTik-Hotspot-Anmeldeseite Übersicht In der Hotspot-Anmeldeseite von MikroTik RouterOS wurde eine Schwachstelle für Reflected Cross-Site Scripting XSS entdeckt. Die Schwachstelle wird über den URL-Parameter dst ausgelöst, dessen Eingabe nicht...

PT-2026-80995

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.3 Description Combodo iTop is a web-based IT service management tool. The software contains a Reflected Cross-Site Scripting XSS flaw within the dashboard revert functionality. Reflected XSS occurs when an...

xss2shell-check

xss2shell-check Rilevatore non distruttivo e senza dipendenze per la primitiva di riflessione CVE-2026-64638 "XSS2Shell" in WordPress wp-login.php. Contesto CVE-2026-64638 è una XSS riflessa pre-autenticazione nel core di WordPress , divulgata da PWN.AI il 2026-08-07 CVSS 8.9, CWE-79 e corretta...

CVE-2020-15053

CVE-2020-15053 : Artica Proxy vor 4.28.030418 Community Edition erlaubt Reflektiertes Cross-Site-Scripting. Produktbeschreibung: Artica Tech bietet eine leistungsstarke, aber einfach zu bedienende Lösung, die normalerweise großen und multinationalen Unternehmen vorbehalten ist. Mit einem Startpre...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Reflected XSS pre-autenticazione → Catena di Remote Code Execution DOM Clobbering + furto di Application Password + attivazione plugin REST API = RCE completo ⚡ Panoramica CVE-2026-64638 è una Reflected XSS pre-autenticazione critica in WordPress wp-login.php...

CVE-2026-77115

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

EUVD-2026-64638

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

CVE-2026-77115

Brave Popup Builder (WordPress plugin) versions up to 0.8.5 are affected by an unauthenticated reflected XSS vulnerability. The root cause is the reflection of UTM query parameters into popup form HTML without proper output escaping, allowing an attacker to inject arbitrary script via crafted URL...

CVE-2026-77115 Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell Reflektiertes XSS vor der Authentifizierung → Remote-Codeausführung im WordPress-Core ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient ausschließlich autorisierten Sicherheitsforschungs- und Bildungszwecken. Verwenden Sie es nicht gegen Systeme, die Ihnen nicht gehören ode...

CVE-2024-50335

CVE-2024-50335: XSS autenticato nel campo "Publish Key" che consente la creazione non autorizzata di utenti amministratori Sommario Il campo "Publish Key" nella pagina Edit Profile di SuiteCRM è vulnerabile a Cross-Site Scripting XSS riflesso, consentendo a un attaccante di iniettare codice...

CVE-2021-32157

..| XSS a RCE CRON|.. Descrizione : Sfruttare un attacco di Cross-Site Scripting XSS riflesso per ottenere un'esecuzione remota di comandi RCE tramite la funzione Scheduled Cron Jobs di Webmin Versione Testata : Webmin 1.973 ultima versione di GitHub 07/03/2021 Tipo di Attacco: Remoto Impatto :...

CVE-2021-32160

..| XSS para usuário privilegiado |.. Descrição : Explorando um ataque de Cross-Site Scripting XSS refletido para criar um usuário privilegiado por meio do recurso de adição de usuários do Webmin e, em seguida, obtendo um shell reverso por meio do recurso de processos em execução do Webmin Versão...

CVE-2021-32161

..| XSStoCommandInjection2 |.. Descrizione : Sfruttare un attacco di Cross-Site Scripting XSS riflesso per ottenere un Command Injection tramite la funzione File Manager di Webmin Versione testata : Webmin 1.973 ultima versione su GitHub 07/03/2021 Tipo di attacco: Remoto Impatto : Esecuzione di...

CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-29519-Lucee-Reflected-XSS Proof of Concept per XSS riflesso in Lucee CFML CVE-2026-29519 Framework 0-Day: XSS riflesso nel parsing degli URL di Lucee CFML colpisce le distribuzioni enterprise versioni 5.3.1.95 - 7.x Scopritore: Fouad Milat lavado Data della scoperta: 6 dicembre 2025 CVE:...

CVE-2026-33240

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

EUVD-2026-64175

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

CVE-2026-33240

Combodo iTop , a web-based IT service management tool, is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the foreign key search criteria API prior to version 3.2.3 . The flaw allows an attacker to inject malicious scripts that execute in a victim's browser when they interact ...

CVE-2026-33240 Combodo iTop: Reflected XSS in foreign key search criteria

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...