CVE-2026-101141

A cross-site scripting (XSS) vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Play Audio Page component. The flaw is located in an unknown function of the file /callrec/audio.jsp , where an attacker can remotely manipulate the viewRoleId/cfType argument to execute the attac...

EUVD-2026-88446

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

turbo-intruder

Turbo Intruder Turbo Intruder es una extensión de Burp Suite para enviar grandes cantidades de solicitudes HTTP y analizar los resultados. Está diseñado para complementar a Burp Intruder manejando ataques que requieren velocidad, duración o complejidad excepcionales. Las siguientes característica...

evilrdp

🚩 Patrocinadores Si te gusta este proyecto, ¡considera patrocinarlo en GitHub! Patrocinadores EVILRDP - Más control sobre RDP El gemelo malvado de aardwolfgui que utiliza la biblioteca cliente RDP aardwolf y te brinda control extendido sobre el objetivo y capacidades adicionales de scripting desd...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "tname" en "newterm" Descripción : Una vulnerabilidad de Cross-Site Scripting XSS en el componente “newterm” de School Fees Management System 1.0 permite a los atacantes ejecutar scripts...

nmap-nse-vulnerability-scripts

Scripts de escaneo de vulnerabilidades de NMAP Una colección de scripts de escaneo de vulnerabilidades de nmap para ayudar a la detección y remediación asequibles. Antecedentes Estos scripts utilizan el Nmap Scripting Engine NSE para implementar comprobaciones de diversas vulnerabilidades...

CVE-2023-27350

CVE-2023-27350 POC para CVE-2023-27350 que afecta a PaperCut MF/NG Análisis técnico Un análisis técnico de causa raíz de la vulnerabilidad, indicadores de compromiso y exposición a Internet se puede encontrar en nuestro blog:...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

Cross-Site Scripting XSS almacenado sin autenticación en genai/evalsvisualization.py del SDK de Google Cloud Vertex AI google-cloud-aiplatform versiones desde 1.98.0 hasta sin incluir 1.131.0 - github.com/googleapis/python-aiplatform Autor: Joshua Provoste Investigador y desarrollador de N-day...

CVE-2023-34840

CVE-2023-34840 Explicación de la vulnerabilidad Todas las versiones de angular-ui-notification son vulnerables a XSS debido a que la librería no sanitiza las entradas proporcionadas por el usuario. Para usar esta librería de forma segura, se recomienda encarecidamente sanitizar / codificar los...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to...

CVE-2026-101111

The Joomla Extension - ordasoft.com - Book Library (Free) version

EUVD-2026-88439

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

CVE-2026-101109

The Joomla Extension - ordasoft.com - Vehicle Manager (Free) is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 6.5.8 . The root cause is that the public vehicle-detail page (triggered by task=view) echoes the title request parameter directly into a double-quoted HTML attr...

EUVD-2026-88437

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free tag, to be injected into the page...

CVE-2026-100753

The Joomla Extension - ordasoft.com - Real Estate Manager (Free) is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 6.7.9 . The issue exists on the public property-detail page's "leave a review" form, where the title field repopulates from the request without any escaping ...

EUVD-2026-88435

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager Free element to execute in the browser of anyone who loads the crafted link...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente “addnewparent” de School Fees Management System 1.0 permite a los atacantes ejecutar scrip...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - Multiple Cross-Site Scripting XSS Vulnerability in “firstname”, "lastname", "middlename", "contact" or “address” parameters Description : Multiple cross-site scripting XSS vulnerabilities in /customersupport/ajax.php?action=savecustomer in Customer...

CVE-2023-34599

CVE-2023-34599 Multiple Cross-Site Scripting XSS vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code. Proof of Concept Parameter allUsers http://gibbon.local/index.php?q=/modules/Timetable...