Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Exploit Title: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...

svg-hush

svg-hush The goal of this tool is to make arbitrary SVG files as benign and safe to serve as images in other common Web file formats. SVG files aren't just images, they're documents with full access to all HTML and JavaScript features. This tool filters SVG files to remove use of any potentially...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...

CVE-2021-39475

CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING MANAGEMENT SYSTEM" POC VIDEO: Security Risk: This security vulnerability allows to execute arbitrary JavaScript code in user browser if they access URL prepared by attackers...

CVE-2025-63708

CVE-2025-63708 CVE ID: CVE-2025-63708 Assigned: 11-12-2025 Problem Type: CWE-79 Cross-Site Scripting Affected Product: “AI Font Matcher” posted 2025-10-10, nid=18425 Product page: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html...

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 If this project helps you, consider supporting it with a $10 donation to keep it growing. Link: https://rzp.io/rzp/zgkC6h5B An interactive, self-hosted XSS training platform with 33 progressively harder challenges — designed for hackers, pentesters, and developers who...

CVE-2025-60654

CVE-2025-60654 - Stored Cross-Site Scripting XSS in Ad Description | ---|--- Researchers| DotAdrien Severity| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag Description The ad description field is vulnerable to stored Cross-Site Scripting XSS. Although some security...

CVE-2026-47761

👋 Hello ! Security Research 🛡️ CVE-2026-47761 – Security Researcher Type : Stored Cross-Site Scripting XSS Product : TinyMCE References : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Hall of Fame...

CVE-2021-45744

CVE-2021-45744 Exploit Title: Bludit 3.13.1 - TAGS Field Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45744...

CVE-2020-9460

CVE-2020-9460 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...

CVE-2022-38374

CVE-2022-38374 Text COpy from :https://vulners.com/cve/CVE-2022-38374...

CVE-2022-23808

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Exploit Author : Dipak Panchal @th3.d1p4k Vendor Homepage : https://www.phpmyadmin.net Software Link : https://www.phpmyadmin.net/files/5.1.1/ Affected Versions : phpMyAdmin versions of the 5.1 branch prior to 5.1.2 ar...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

CVE-2024-37383-POC

CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Introduction This repository contains a proof of concept for the XSS vulnerability in roundcube: CVE-2024-37383. More information about this vulnerability can be found: here Steps Start Roundcube If you don't have an instance of roundcube...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...