WSO2-2020-0731

WSO2-2020-0731: ثغرات XXE و XSS في WSO2 Carbon تم تحديد ثغرات XXE و XSS محتملة في العديد من منتجات WSO2. إفصاح البائع: يمكن العثور على إفصاح البائع وإصلاح هذه الثغرة هنا. لماذا لا يوجد CVE؟ لم يقم البائع ولا أنا بطلب CVE لهذه الثغرات. المتطلبات: تتطلب هذه الثغرة: إقناع مستخدم WSO2 شرعي بإضافة...

CVE-2020-3580

Scanner Automatico CVE-2020-3580 CVE-2020-3580 - Software Cisco Adaptive Security Appliance ASA e Cisco Firepower Threat Defense FTD XSS. Utilizzo root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 inserisci i domini/IP che vuoi scansionare in formato fi...

CVE-2024-42834

Exploit-Titel: INCOGNITO SAC GESPEICHERTE CROSS-SITE-SCRIPTING XSS SCHWACHSTELLE Datum: 26. JULI 2024 Exploit-Autor: Etienne Supra Hersteller-Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Der Hersteller wurde informiert und hat die...

jquery-cve-2022-31160

jQuery UI CVE-2022-31160 भेद्यता प्रदर्शन यह प्रोजेक्ट jQuery UI Checkboxradio विजेट भेद्यता CVE-2022-31160 का प्रदर्शन करता है, जो विजेट रिफ्रेश ऑपरेशन के दौरान HTML एंटिटी डिकोडिंग की अनुमति देता है, जो पोटेंशियली क्रॉस-साइट स्क्रिप्टिंग XSS हमलों का कारण बन सकता है। 🚨 सुरक्षा चेतावनी ⚠️ इस...

EUVD-2026-67578

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-78238

SOY Gallery is affected by a cross-site scripting (XSS) vulnerability that allows arbitrary script execution in the web browser of a user who is logging in to the product. The vulnerability requires low privileges and active user interaction , with impact on subsequent system confidentiality and ...

CVE-2026-78238

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-77838

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-77838

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging in to the product. The vulnerability is scored 5.4 (MEDIUM) under CVSS v3.0, requiring low privileges and user interaction. No fix vers...

EUVD-2026-67577

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-73827

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-73827

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...

EUVD-2026-67576

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

WSO2-2021-1261

WSO2-2021-1261: Múltiplos Cross-Site Scripting no WSO2 ESB Devido à codificação incorreta de saída, múltiplos ataques de Cross-Site Scripting XSS foram identificados no WSO2 ESB. Divulgação do Fornecedor: A divulgação e a correção do fornecedor para esta vulnerabilidade podem ser encontradas aqui...

CVE-2024-56115

CVE-2024-56115 Descrizione suggerita Esiste una vulnerabilità in Amiro.CMS prima della versione 7.8.4 a causa della mancata adozione di misure per neutralizzare elementi speciali. Consente a un attaccante remoto di condurre un attacco Cross-Site Scripting XSS. Tipo di vulnerabilità CWE-78 |...

CVE-2026-50229

⚡ CVE-2026-50229 — Apache Tomcat Esempi XSS Exploit...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso esclusivo per scopi educativi e ambienti autorizzati. PoC funzionale per la vulnerabilità CVE-2022-47447, che colpisce un plugin WordPress vulnerabile, consentendo un attacco di tipo Cross-Site Request Forgery CSRF contro utenti autenticati. URL...

CVE-2023-46974

CVE-2023-46974 POC Descrizione La vulnerabilità Cross Site Scripting nel Best Courier Management System v.1.000 consente a un attaccante remoto di eseguire codice arbitrario tramite un payload appositamente creato nel parametro page dell'URL. Tipo di vulnerabilità Cross Site Scripting XSS Fornito...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 Potete vedere la versione coreana del post qui : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR Una vulnerabilità Cross-Site Scripting XSS nella pagina iniziale del captive portal del router di seconda generazione potreb...

CVE-2022-30507-PoC

Descrizione Esecuzione di codice remoto RCE tramite esecuzione di codice JavaScript - Cross-site-scripting XSS e processo di rendering tramite nodeintegration, che è responsabile del processo di rendering e dell'accesso al codice Node.js Video PoC Riferimenti...