CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2025-24893-EXP

CVE-2025-24893-EXP Versões Afetadas xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 Prova de Conceito https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - Exploit da Plataforma XWiki usage: python...

CVE-2025-50363_BXSS_CVE

Nome del progetto e URL del repository: Maid Hiring Management System using PHP and MySQL Tipo di vulnerabilità: Escalation dei privilegi tramite Blind XSS Versionei interessatae: v1.0 💣Descrizione della vulnerabilità: È stata scoperta una vulnerabilità di Blind Cross-Site Scripting XSS nel Maid...

CVE-2023-31852

CVE-2023-31852 Esiste un attacco di cross-site scripting XSS riflesso nell'interfaccia di gestione basata sul web di Cudy LT400. La pagina /cgi-bin/luci/admin/network/wireless/config presenta XSS riflesso tramite il parametro iface. I metodi di sfruttamento comporterebbero l'invio di una richiest...

CVE-2025-65300

CVE-2025-65300 Beschreibung CVE-2025-65300: Gespeicherte Cross-Site-Scripting-Schwachstelle XSS in der Coohom-SaaS-Plattform Offenlegungsdatum: 2025-10-28 Zuletzt aktualisiert: 2025-10-28 Reporter: Phisit Pupiw Anbieter: Coohom CWE: CWE-79 – Cross-Site Scripting Zusammenfassung Im Modul...

CVE-2025-29602

CVE-2025-29602 - Gespeicherte Cross-Site-Scripting XSS-Sicherheitslücke in FlatPress CMS 1.3.1 Beschreibung Eine gespeicherte Cross-Site-Scripting XSS-Sicherheitslücke existiert im Administrationsbereich von Flatpress CMS 1.3.1. Ein Angreifer mit Admin-Rechten kann eine bösartige...

CVE-2025-66850

Scoperta All'interno dell'applicazione 'LibreNMS', abbiamo scoperto una vulnerabilità di Cross-Site Scripting riflesso; questa vulnerabilità risiede nel parametro protocol del modulo di routing, consentendo a un utente malintenzionato di eseguire JavaScript dannoso nel browser di una vittima...

CVE-2023-31853

CVE-2023-31853 Im webbasierten Management-Interface des Cudy LT400 existiert eine reflektierte Cross-Site-Scripting XSS-Angriffsmöglichkeit. Die Seite /cgi-bin/luci/admin/network/bandwidth weist eine reflektierte XSS über den Parameter icon auf. Die Ausnutzungsmethoden beinhalten das Senden einer...

adaPwn

adaPwn - CVE-2019-14912 PoC Il modulo adAS OPENSSO non verifica correttamente il dominio a cui reindirizzare, rendendo possibile reindirizzare l'utente verso un sito web controllato dall'attaccante, rubando il suo cookie di sessione adAS. Utilizzo usage: adaPwn.py -h --interface INTERFACE...

CVE-2022-29359

Sistema di applicazione per club scolastici Problema: Cross-Site Scripting memorizzato non autenticato, iniezione HTML e RCE Autore: Zak Clifford Data: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

PT-2026-82331

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.15.3 Description Stored cross-site scripting occurs when file comments are stored as raw text and rendered into the page using innerHTML without sanitization. The backend only performs a length check, allowing a team...

CVE-2026-78655

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2026-78655

Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...

CVE-2026-78655 Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...

CVE-2023-43326

mooSocial: XSS CVE-2023-43326 Una vulnerabilità di cross-site scripting XSS riflesso è presente in più URL di mooSocial v3.1.8 e consente agli aggressori di rubare i cookie di sessione degli utenti e di impersonare il loro account tramite un URL appositamente predisposto. Nota: XXS funziona anche...

CVE-2023-43325

mooSocial: XSS CVE-2023-43325 Eine reflektierte Cross-Site-Scripting XSS-Schwachstelle existiert im Parameter dataredirecturl der Benutzeranmeldefunktion von mooSocial v3.1.8, die es Angreifern ermöglicht, die Sitzungscookies des Benutzers zu stehlen und über eine manipulierte URL dessen Konto zu...

CVE-2023-45542

CVE-2023-45542 In mooSocial v3.1.8 existiert eine reflektierte Cross-Site-Scripting XSS-Schwachstelle im Parameter q der Suchfunktion, die es Angreifern ermöglicht, die Session-Cookies des Benutzers zu stehlen und sein Konto über eine manipulierte URL zu übernehmen. Verwundbarer Parameter: q...

CVE-2023-44813

CVE-2023-44813 Eine reflektierte Cross-Site-Scripting XSS-Schwachstelle im mode -Parameter der Funktion „Invite Friend“ von mooSocial v3.1.8, die es Angreifern ermöglicht, die Session-Cookies von Benutzern zu stehlen und sich über eine manipulierte URL als deren Konto auszugeben. Verwundbarer...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

pwn-pulse

pwn-pulse.sh Exploit per la vulnerabilità di lettura arbitraria di file in Pulse Connect Secure SSL VPN CVE-2019-11510 Script creato da braindead @BishopFox. Basato sulla ricerca di Orange Tsai e Meh Chang. Ringraziamenti anche a Alyssa Herrera e 0xDezzy per ulteriori contributi. Un enorme grazie...