1163477 matches found
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
plasma
PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...
cyberprobe
Cyberprobe The full documentation is at https://cybermaggedon.github.io/cyberprobe-docs/ Summary Cyberprobe is a network packet inspection toolkit Deep Packet Inspection for real-time monitoring of networks. This has applications in network monitoring, intrusion detection, forensic analysis, and ...
PwnXSS
A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Commands: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usage Basic usage: python3 pwnxss.py -u...
XSS-Scanner
XSS Scanner Cross-Site Scripting XSS is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS...
evilrdp
🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors EVILRDP - More control over RDP Th evil twin of aardwolfgui using the aardwolf RDP client library that gives you extended control over the target and additional scripting capabilities from the command line. Features...
Web-Security-Learning
Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...
sobelow
Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...
hsecscan
hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...
CVE-2026-114693
The Plugins360 Labs All-in-One Video Gallery plugin for WordPress (versions n/a through 4.9.7 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue stems from the improper neutralization of input during web page generation . Exploitation of this vulnerability can allow an attacker to ...
CVE-2026-114178
The Bold Grid W3 Total Cache WordPress plugin (versions up to and including 2.10.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This vulnerability is caused by the improper neutralization of input during web page generation , allowing an attacker to execute malicious scripts in th...
EUVD-2026-109252
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bold Grid W3 Total Cache w3-total-cache allows Stored XSS.This issue affects W3 Total Cache: from n/a through 2.10.7...
CVE-2026-37750
CVE-2026-37750 — School Management System 1.0 - Reflected XSS Details Field| Info ---|--- CVE ID| CVE-2026-37750 Type| Reflected Cross-Site Scripting XSS Severity| Medium CVSSv3: 6.1 Vendor| mahmoudai1 Product| School Management System Version| 1.0 Discoverer| Varad AP Mene Date| 2026-04-16 CWE|...
RealPlayer_G2_RCE
Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...
CVE-2023-33829-POC
CVE-2023-33829-POC SCM Manager XSS...
nmap-nse-scripts
Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...
CVE-2020-17453-PoC
CVE-2020-17453 WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. PoC Proof of Concept https://.com/carbon/admin/login.jsp?msgId=%27;alert1// Discoverers Name: Jackson Henry Twitter: @JacksonHHax Name: Nicholas Young...
Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC
Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...