PwnXSS

Un potente escáner XSS hecho en Python 3.7 Instalación Requisitos: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Comandos: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Uso...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

CVE-2024-56115

CVE-2024-56115 Suggested description A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct an Cross-Site Scripting XSS attack. Vulnerability Type CWE-78 | Improper Neutralization of Special Elemen...

CVE-2024-23176

A flaw was found in the MassMessage extension of MediaWiki. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into web pages viewed by other users. The flaw occurs when a specially crafted URL, specifically Special:MassMessage?uselang=x-xs...

PoC-CVE-2024-24035

CVE-2024-24035 Título The SIL 3.1 es vulnerable a Cross Site Scripting XSS en el parámetro "hmessage". Fecha: 2024-01-14 Autor: Elizeu Das Dores Página del proveedor: https://www.setorinformatica.com/ Versión: 3.1 POC CVE-2024-24035 El parámetro "hmessage" es vulnerable a DOM Based Cross Site...

CVE-2023-4771

CKEditor cross-site scripting vulnerability in AJAX sample CVE-2023-4771 PoC CKEditor 4 Cross-site scripting XSS vulnerability in AJAX sample This document describes how to perform an XSS vulnerability CVE-2023-4771 using CKEditor. Make sure the following is done with great caution to follow...

Vulnerable-Docker--CVE-2023-30212-

Vulnerable-Docker-CVE-2023-30212- Esto contiene los directorios necesarios y el Dockerfile para replicar una vulnerabilidad en OURPHP que tiene una vulnerabilidad XSS CVE-2023-30212. Creando un Entorno Docker Vulnerable CVE-2023-30212 PRE-REQUISITOS Descargar Docker sudo apt install -y docker.io...

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Múltiples vulnerabilidades de cross-site scripting XSS Descripción : Múltiples vulnerabilidades de cross-site scripting XSS en School Fees Management System v1.0. Versión del Producto Vulnerable : School Fees Management System v1.0 Autor del CVE...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/class" Description : A cross-site scripting XSS vulnerability in the component "/management/class" of School Fees Management System v1.0 allows attackers to execute...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce...

CVE-2021-26832

CVE-2021-26832 Descripción sugerida Cross Site Scripting XSS en el formulario de la página 'Restablecer contraseña' de Priority Enterprise Management System v8.00 permite a los atacantes ejecutar javascript en nombre de la víctima mediante el envío de una URL maliciosa o dirigiendo a la víctima a...

CVE-2026-90695

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90694

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2023-51214

Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...

react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 Un PoC simple para reproducir la vulnerabilidad XSS Pasos npm i npm run start Ve a localhost:3006...

CVE-2026-90696

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Product Management Module , specifically in the file /api/products_handler.php . Manipulating the Product_Name argument allows a remote, low-privilege attacker to inject malicious scrip...

CVE-2026-90696 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

EUVD-2026-77327

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 クロスサイトスクリプティングXSS 割り当てCVE番号: CVE-2017-11611...

CVE-2026-90695

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Vendor Management component, specifically in the file /api/vendors_handler.php. The flaw is exploitable remotely with low complexity and low privileges, requiring user interaction. A pr...