WordPress Checklist <1.1.9 - Cross-Site Scripting

WordPress Checklist plugin before 1.1.9 contains a cross-site scripting vulnerability. The fill parameter is not correctly filtered in the checklist-icon.php file. id: CVE-2019-16525 info: name: WordPress Checklist 1.1.9 - Cross-Site Scripting author: daffainfo severity: medium description:...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the sshform.php script functionality. id: CVE-2021-21800 info: name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting author: arafatansari severity: medium description: | Advantech R-SeeNet 2.4.12 contains a...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

Kentico-Xperience-before-13.0.178---XSS-POC

Dieses Repository hat keine README-Datei...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Benvenuti nel repository ufficiale che documenta la scoperta e i dettagli della CVE-2025-26206 , una critica vulnerabilità di Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0. Scoperta da B. Sibhi , quest...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Umgebung herunterladen, entpacken und hineinwechseln root@kitploit: unzip cve-2024-4367-lab cd cve-2024-4367-lab Startbefehl für die Umgebung root@kitploit: mkdir upload chmod 777 upload docker-compose up -d...

Tiredful-API

Was ist die Tiredful API? Tiredful API ist eine absichtlich fehlerhaft gestaltete Anwendung. Ziel dieser Web-App ist es, Entwicklern, QA-Ingenieuren oder Sicherheitsexperten die Schwachstellen in Webservices REST API zu vermitteln, die durch unsichere Programmierpraktiken entstehen. Wer kann...

cPanel-CVE-2023-29489

POC für cPanel CVE-2023-29489 XSS Payload...

CVE-2024-21338-1

CVE-2024-21338 Questo PoC è stato sviluppato per il contest XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

rayhunter

Rayhunter Rayhunter è un progetto per rilevare gli IMSI catcher, noti anche come simulatori di stazione base cellulare o stingray. È stato inizialmente progettato per funzionare su un hotspot mobile economico chiamato Orbic RC400L, ma grazie agli sforzi della comunità, può supportare anche altri...

hackazon

Hackazon Hackazon é um site de teste vulnerável gratuito, uma loja virtual construída com as mesmas tecnologias usadas nos aplicativos modernos ricos e móveis. O Hackazon possui uma interface AJAX, workflows rigorosos e APIs RESTful usadas por um aplicativo móvel complementar, fornecendo um...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2025-0133

Beschreibung: Es handelt sich um einen POC für CVE-2025-0133, der nur auf PAN-OS-Firewall-Konfigurationen mit einem aktivierten GlobalProtect-Gateway oder -Portal anwendbar ist. Es prüft mit einer benutzerdefinierten Threadanzahl die Schwachstelle auf mehreren URLs, die aus einer Datei eingelesen...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-82090

Pocket for Android (versions through 8.33.0.0 ) is affected by a Cross-Site Scripting (XSS) vulnerability rated CVSS 4.0 9.2 (CRITICAL) . The root cause is that the "Save to Pocket" feature injects external HTML into the DOM, allowing injected JavaScript to alter the application state via native ...

EUVD-2026-67403

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-30691

CVE-2026-30691 - Avviso di vulnerabilità Dettagli ufficiali del record di vulnerabilità MITRE e documentazione tecnica per CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggerita descrizione Vulnerabilità di Cross-Site Scripting XSS in @cyntler/react-doc-viewer...

ransomwatch

RansomWatch RansomWatch è uno strumento di monitoraggio dei siti di fuga di dati ransomware. Scansiona tutte le voci presenti su vari siti di fuga ransomware, memorizza i dati in un database SQLite e invia notifiche tramite Slack o Discord quando compare una nuova vittima o quando una vittima vie...

CVE-2024-34312

CVE-2024-34312 Beschreibung Im Virtual Programming Lab für Moodle bis Version 4.2.3 wurde eine Cross-Site Scripting XSS -Sicherheitslücke in der IDE-Komponente entdeckt. Weitere Details Der Browser verbindet sich direkt mit einem Websocket, der auf dem Jail-Server läuft. Durch den Websocket kann...