CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Múltiples vulnerabilidades de cross-site scripting XSS Descripción : Múltiples vulnerabilidades de cross-site scripting XSS en School Fees Management System v1.0. Versión del Producto Vulnerable : School Fees Management System v1.0 Autor del CVE...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting en el Sistema de Gestión de Donantes de Sangre usando CodeIgniter - 1.0 Descripción sugerida Phpgurukul Sistema de Gestión de Donantes de Sangre 1.0 permite Cross Site Scripting a través de la función Agregar Nombre de Grupo Sanguíneo. Información Adicional PoC...

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...

Composr-CMS-10.0.13-Cross-Site-Scripting-XSS

Composr-CMS-10.0.13-Cross-Site-Scripting-XSS Composr CMS 10.0.13 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6518...

german-owasp-day

german-owasp-day German OWASP Day conference site & presentation archive You can find the page at god.owasp.de Please create a folder for each year and then point the redirect from the main index to that folder...

CVE-2022-30513

CVE-2022-30513 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30513 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-9609...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting en el Sistema de Gestión de Registros de Profesores usando CodeIgnitor Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en el Sistema de Gestión de Registros que usa CodeIgniter 1.0 permite a los atacantes ejecutar scripts web arbitrarios o...

CVE-2022-38374

CVE-2022-38374 Text COpy from :https://vulners.com/cve/CVE-2022-38374...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-11611...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

strongswan

strongSwan Configuration Overview strongSwan is an OpenSource IPsec-based VPN solution. This document is just a short introduction of the strongSwan swanctl command which uses the modern vici Versatile IKE Configuration Interface. The deprecated ipsec command using the legacy stroke configuration...

XSS-Payloads

This repository does not have a README...

traxss

Traxss Escáner Automatizado de Vulnerabilidades XSS | Escrito en Python3 | Utiliza Selenium Headless Forks DEMO Antecedentes ¡Traxss es un proyecto de Hacktoberfest! Si buscas un lugar para contribuir, siéntete libre. Traxss es un framework automatizado para escanear URLs y páginas web en busca d...

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Proof of Concept: CVE-2024-42008 and CVE-2024-42010 This proof of concept PoC demonstrates the exploitation of two vulnerabilities in Roundcube Webmail that enable CSS injection and a cross-site scripting XSS. The attack consists of two stages: 1. XSS via malicious XML attachment CVE-2024-42008...

CVE-2026-78902

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

Scanner-and-Patcher

Scanner y Patcher Resumen: El proyecto Scanner and Patcher se ha desarrollado como parte del framework AlphaSecure, el cual ha sido presentado y publicado en ACM IC3 2024 con el título AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation...

CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...