CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F vor Version S3150-8T2F2.2.0D135103 ist anfällig für Cross Site Scripting XSS in der Funktion „Time Range Configuration“ der Verwaltungsoberfläche. Ein Angreifer kann bösartiges JavaScript in das...

CVE-2022-42889-text4shell

CVE-2022-42889 alias text4shell PoC per la vulnerabilità scoperta di recente in Apache Commons Text di @pwntester: La vulnerabilità risiede nell'oggetto interpolatore StringSubstitutor. Un interpolatore viene creato dal metodo StringSubstitutor.createInterpolator e consente ricerche di stringhe...

CVE-2019-1332

CVE-2019-1332: माइक्रोसॉफ्ट एसक्यूएल सर्वर रिपोर्टिंग सेवाओं में प्रतिबिंबित क्रॉस-साइट स्क्रिप्टिंग एक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी तब मौजूद होती है जब माइक्रोसॉफ्ट एसक्यूएल सर्वर रिपोर्टिंग सेवाएँ SSRS किसी प्रभावित SSRS सर्वर पर एक विशेष रूप से तैयार किए गए वेब अनुरोध को उचित रूप से...

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...

CVE-2022-35914

CVE-2022-35914 PoC Referenzen https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Dank an Sébastien Copin für den PoC, den ich hier angepasst habe Meine vollständige Analyse gibt es hier: https://link.medium.com/tBwDlpQl3Ib...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

CVE-2023-38831

CVE-2023-38831 Exploit - Générateur d'archive Appât et Changement Vue d'ensemble Ce script Python est conçu pour générer un fichier d'archive de type « appât et changement ». Il est destiné uniquement à des fins éducatives et de piratage éthique. Veuillez vous assurer d'avoir les autorisations...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

poc-cribl-rce

Aviso Legal Isto é apenas para fins informativos/educacionais. Isto foi elaborado para demonstrar uma vulnerabilidade na ferramenta, para que uma correção possa ser verificada pelo fornecedor. Informações Testado no Cribl v1.5.0 - Versões anteriores não testadas, mas provavelmente vulneráveis. Um...

CVE-2020-14882-WebLogic-Analysis

Ricerca di vulnerabilità: Sfruttamento della catena CVE-2020-14882 e CVE-2020-14883 in Oracle WebLogic Server Il repository contiene un rapporto tecnico Write-up e un Proof of Concept PoC di livello concettuale per dimostrare la catena di vulnerabilità di bypass dell'autenticazione Authentication...

CVE-2024-39248

Titolo Exploit: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Autore Exploit: Jason Jacobs 0xjasonjacobs - Twitter Homepage del fornitore: https://sourceforge.net/projects/simpcms/ Endpoint vulnerabile: /SimpCMS/admin.php Una vulnerabilità di cross-site scripting XSS in SimpCMS v0.1...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "tname" su "newterm" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newterm" di School Fees Management System 1.0 consente a un utente malintenzionato di eseguire...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Vulnerabilidade de Cross-Site Scripting XSS no parâmetro "name" em "addnewparent" Description : Uma vulnerabilidade de cross-site scripting XSS no componente “addnewparent” do School Fees Management System 1.0 permite que atacantes executem...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "cname" su "newclass" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newclass" di School Fees Management System v1.0 consente agli attaccanti di eseguire script we...

CVE-2023-49984

CVE-2023-49984 स्कूल फीस प्रबंधन प्रणाली v1.0 - "/management/settings" पर "name" फ़ील्ड/पैरामीटर में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी विवरण : School Fees Management System v1.0 के "/management/settings" घटक में एक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी हमलावरों को name पैरामीटर में इंजेक्ट किए गए ए...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "name" su "/management/class" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "/management/class" di School Fees Management System v1.0 consente a un attaccant...

Heimdall Application Dashboard < 2.7.3 - Reflected XSS

LinuxServer.io Heimdall 2.7.3 contains a stored XSS caused by improper sanitization of the "q" parameter, letting remote attackers execute scripts, exploit requires crafted input. id: CVE-2025-54597 info: name: Heimdall Application Dashboard 2.7.3 - Reflected XSS author: 0xAkoko severity: medium...

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

WP DeskLite - Reflected XSS

WP DeskLite WordPress plugin through 1.0.0 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12724 info: name: WP DeskLite - Reflected XSS...