CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD Description Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script...

OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in virtual network template Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept : Fix : Upgrade...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in zone attribute Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept : Fix : Upgrade to...

poc-cribl-rce

Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...

CVE-2019-1332

CVE-2019-1332: Reflected Cross-Site Scripting in Microsoft SQL Server Reporting Services A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who...

CVE-2025-63830

📂 CKFinder 1.4.3 – Stored Cross-Site Scripting XSS via Malicious SVG Upload CVE ID: CVE-2025-63830 🧭 Overview A stored Cross-Site Scripting XSS vulnerability was identified in CKFinder v1.4.3. The issue resides in the file upload functionality, which fails to properly sanitize SVG files containin...

text4shell-poc

CVE-2022-42889 PoC Test Application This is a vulnerable application developed as a Proof of Concept for the vulnerability CVE-2022-42889. Maven Installation In order to run this you will need: JDK 17 or above Maven 1. Clone the git repo git clone https://github.com/securekomodo/text4shell-poc.gi...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

CVE-2022-41040_Mitigation

download the script to the affected machine and run it...

CVE-2023-38831

CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...

CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

CVE-2024-20405

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP...

gitbook-xss

gitbook-xss CVE-2019-19596 GitBook through 2.6.9 allows XSS via a local .md file By entering script in MD file, it can be executed by gitbook...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

rejjeto_hfs-rce-exploit-cve-2014-6287

HFS Remote Command Execution Exploit CVE-2014-6287 This is a Python 3 rewrite of the classic Remote Command Execution RCE exploit targeting Rejetto HTTP File Server HFS v2.3.x , leveraging the vulnerability identified as CVE-2014-6287. Originally discovered by Avinash Kumar Thapa aka "-Acid" , th...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

XcInspector

XcInspector: for Xcode Project Security XcInspector is a macOS app, and command line tool, to scan Xcode project files for possible security issues. Source Code Repository on GitLab List of planned checks rules Why? There are some ways that Xcode projects can be used to compromise security and...

CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

EUVD-2026-109255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plugins360 Labs All-in-One Video Gallery all-in-one-video-gallery allows Stored XSS.This issue affects All-in-One Video Gallery: from n/a through 4.9.7...

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...