apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Usage: Pre-requisites: have python, docker, maven and a jdk installed 1. clone this repo 2. run mvn clean package in project root 3. run docker build -t hack . 4. run docker run -d -p...

CVE-2026-105060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...

EUVD-2026-92319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...

CVE-2026-105060

The WordPress Logo Showcase plugin (by Themepoints) is vulnerable to a Stored Cross-site Scripting (XSS) flaw in versions 4.0.4 and earlier . The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to inject and execute malicious sc...

CVE-2026-105060 WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...

CVE-2026-105060 WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...

WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Logo Showcase versions = 4.0.4...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

log4j-2021-vulnerability-study

log4j-2021-vulnerability-study This is a showcase how the Log4J vulnerability CVE-2021-44228 could be explored. This code is safe to run, but understand what it does and how it works!...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 showcase RCE Build Dockerfile docker build -t cve-2017-9805 . Start and detach container docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash Login to running container docker exec -it cve-2017-9805 /bin/bash Start tomcat...

CVE-2026-100148

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews.text' parameter in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100148 Rich Showcase for Google Reviews <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Google Review Text (imported via Places API)

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews.text' parameter in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100148

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.1.3 . The root cause is insufficient input sanitization and output escaping of the 'reviews[].text' parameter. An authenticated attacker with subscrib...

EUVD-2026-91913

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews.text' parameter in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Rich Showcase for Google Reviews plugin <= 7.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jakub Herman in WordPress Plugin Rich Showcase for Google Reviews versions = 7.1.3...

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: python St2-048.py set url :...

CVE-2026-11871 Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details

The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

WordPress Video Gallery plugin <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Attachment 'posttitle' via emdmbmeta Shortcode vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin YouTube Showcase versions = 4.0.4...