Exploit for Cross-site Scripting in Tastyigniter

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant...

Adobe Connect Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74112)

Adobe Connect, an online video conferencing software, is vulnerable to a reflective cross-site scripting vulnerability in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Connect Cross-Site Script Vulnerability

Adobe Connect, an online video conferencing software, is vulnerable to a reflective cross-site scripting vulnerability in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-14749

Name of the Vulnerable Software and Affected Versions ZTE ZXIPTV version 5.06.04.09 ZTE ZXIPTV-EAS version 5.06.04.09 Description The issue is related to two reflective cross-site scripting XSS vulnerabilities in ZTE's big video business platform. These vulnerabilities are caused by insufficient...

CVE-2021-21738: Improper Neutralization of Input During Web Page Generation

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-37462

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...

PowerSploit

This is an offensive tool for Windows PowerShell exploitation. It is a collection of PowerShell modules, specifically PowerSploit, which provides various functions for code execution, DLL injection, and antivirus bypass. The tool is designed to be used by penetration testers and red teamers to te...

Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows What does Injector do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.ex...

Cross site scripting

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request:...

CVE-2021-30119 Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request:...

CVE-2021-30119

The Kaseya VSA Remote Monitoring and Management (RMM) software is vulnerable to an authenticated reflective Cross-Site Scripting (XSS) flaw. The issue resides in the HelpDeskTab/rcResults.asp page, where the result parameter is insecurely returned, and in the done.asp page, where the FileName par...

CVE-2021-30119: Improper Neutralization of Input During Web Page Generation

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: https://x.x.x.x/HelpDeskTab/rcResults.asp?result= The same is tru...

Sharperner - Simple Executable Generator With Encrypted Shellcode

Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning. Features PE binary Process Hollowing PPID Spoofing Random generated AES key and iv...

lws.fr Cross Site Scripting vulnerability OBB-2074337

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

FalconEye - Real-time detection software for Windows process injections

FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it provides a stronger and reliable defense against process injection...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services is affected by a potential Cross Site Scripting (XSS) CVE-2020-5000

Summary Financial Transaction Manager for Corporate Payment Services FTM CPS for Multi-Platform has addressed the following vulnerability. Reflective Cross Site Scripting XSS on some of the screens. Vulnerability Details CVEID: CVE-2020-5000 DESCRIPTION: IBM Financial Transaction Manager is...

PowerSploit

This is an offensive tool for Windows PowerShell exploitation. The repository contains a collection of PowerShell scripts and modules, including AntivirusBypass and CodeExecution, which are designed to bypass antivirus software and execute malicious code, respectively. The AntivirusBypass module...

BloofoxCms Cross-Site Scripting Vulnerability

BloofoxCMS is a free and open source web content management system based on PHP+MySQL. A reflective cross-site scripting vulnerability exists in BloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability by using the fileurl parameter to conduct cross-site scripting attacks...

CVE-2020-10688

A cross-site scripting XSS flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

Microsoft Windows TokenMagic Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Privilege Escalation via TokenMagic UAC Bypass', 'Description' = %q This module leverages a UAC bypass TokenMagic in order to spawn a...