CVE-2024-23998

PoC de Another Redis Desktop Manager Una prueba de concepto para la vulnerabilidad CVE-2024-23998. 1. Resumen de la vulnerabilidad: Tema de la vulnerabilidad: Ejecución local de código mediante XSS Versión vulnerable: = 1.6.6 Tipo de ataque: Ejecución remota de código Vectores de ataque: Para...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Description: A cross-site scripting XSS vulnerability in Sanitization Management System v1.0 allows potential attackers to upload arbitrary files via a crafted name into the system logo Fields of the System Info Fields. The cookie has no HttpOnly Fl...

CVE-2021-32644

CVE-2021-32644 This vulnerability is an XSS vulnerability that affected versions prior to Ampache 4.4.3. https://nvd.nist.gov/vuln/detail/CVE-2021-32644 Installation and Execution Steps 1. Install Ampache When installing, please configure port forwarding in the docker-compose.yml file. The...

CVE-2019-8331

Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in "index.php/category" - vulnerable field: "Category Name" Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in "/bsmsci/index.php/category"...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "tname" parameter on "newterm" Description : A cross-site scripting XSS vulnerability in the component “newterm” of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

Cross-Site Scripting XSS almacenado sin autenticación en genai/evalsvisualization.py del SDK de Google Cloud Vertex AI google-cloud-aiplatform versiones desde 1.98.0 hasta sin incluir 1.131.0 - github.com/googleapis/python-aiplatform Autor: Joshua Provoste Investigador y desarrollador de N-day...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Description : A cross-site scripting XSS vulnerability in the component “addnewparent” of School Fees Management System 1.0 allow attackers to execute arbitrary web...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - Multiple Cross-Site Scripting XSS Vulnerability in “firstname”, "lastname", "middlename", "contact" or “address” parameters Description : Multiple cross-site scripting XSS vulnerabilities in /customersupport/ajax.php?action=savecustomer in Customer...

Deep-Reaver

Deep Reaver Deep Reaver es un potente kit de evaluación de vulnerabilidades y explotación mejorado con IA, construido en Python. Inspirado en herramientas como Nmap y Nessus, Deep Reaver está diseñado para un escaneo modular y profundo de aplicaciones web y servicios. Características Análisis...

CVE-2026-30503-OpenKM-6.3.12-Stored-XSS

🛡️ CVE-2026-30503 — Stored XSS in OpenKM v6.3.12 Discovered & Reported by Dharmendra Kumar — Security Researcher Cybersecurity | Penetration Testing | Vulnerability Research | Responsible Disclosure 📌 Table of Contents Overview CVE Details Affected Product Vulnerability Description Root Cause...

CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by etomixer in WordPress Plugin Youzify versions = 1.3.7...

WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin VikRentCar versions = 1.4.7...

CVE-2025-49844

CVE-2025-49844 - RediShell Use-after-free in Redis Lua scripting leading to remote code execution. Summary of the CVE Redis is an open source, in-memory database. CVE-2025-49844 is a use-after-free vulnerability in Redis's embedded Lua scripting engine. An authenticated user with access to Lua...

WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jamaal ahmed in WordPress Plugin ARForms versions = 7.1.2...

WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Video Background Block – Use video as background in the section. versions = 2.0.3...

CVE-2026-102778

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zein in WordPress Plugin Social Rocket versions = 1.3.5...

EUVD-2026-92453

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...