CVE-2023-50596

CVE-2023-50596 Description suggérée Vulnérabilité de type Cross Site Scripting XSS dans Simple Image Stack Website utilisant PHP et API v.1.00000 permet à un attaquant distant d'exécuter du code arbitraire via un payload spécialement conçu dans l'URL. Informations supplémentaires Collons notre...

CVE-2023-34599

CVE-2023-34599 गिबन v25.0.0 में अनेक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरियाँ पाई गई हैं, जो हमलावरों को मनमाना जावास्क्रिप्ट कोड निष्पादित करने में सक्षम बनाती हैं। प्रूफ ऑफ कॉन्सेप्ट पैरामीटर allUsers http://gibbon.local/index.php?q=/modules/Timetable...

CVE-2026-75971

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9.4. This is due to the rumimporter function being registered on the WordPress core importstart action hook with ...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

CVE-2022-29455

CVE-2022-29455 Vulnerabilidade Wordpress - XSS Cross-Site Scripting Localização da Vulnerabilidade https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Versão Vulnerável Exemplo - https://www.youtube.com/watch?v=4qvOkSbhcE...

CVE-2021-26832

CVE-2021-26832 Descrição sugerida Cross Site Scripting XSS no formulário da página "Redefinir Senha" do Priority Enterprise Management System v8.00 permite que atacantes executem javascript em nome da vítima enviando uma URL maliciosa ou direcionando a vítima para um site malicioso. Tipo de...

CVE-2026-75971

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin is vulnerable to privilege escalation in versions up to and including 4.9.4 . The root cause is the rum_importer() function registered on the import_start action hook without a plugin-owned capability check or allowlist filtering...

towaos-lab-cve-2020-11023

CVE-2020-11023 - jQuery XSS भेद्यता आक्रमण पेलोड root@kitploit: alert1 root@kitploit: बचाव के उपाय ⚠️ महत्वपूर्ण : .html का उपयोग करने पर अकेले jQuery से इसे पूरी तरह नहीं रोका जा सकता 1. .text विधि का उपयोग करें ⭐️ अनुशंसित root@kitploit: // सुरक्षित: HTML के रूप में व्याख्या नहीं की जाती...

CVE-2026-16231

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

CVE-2025-56515

CVE-2025-56515 Уязвимость межсайтового скриптинга XSS в чат-приложении Fiora CVE-2025-56515: Уязвимость межсайтового скриптинга XSS в чат-приложении Fiora Обзор уязвимости CVE ID : CVE-2025-56515 Тип уязвимости : Межсайтовый скриптинг XSS Тип атаки : Удаленная Влияние : Выполнение кода Затронутый...

Exploite-CVE-2023-30212-Vulnerability

إنشاء بيئة Docker قابلة للاستغلال وعرضة لثغرة CVE-2023-30212 الوصف بيئة Docker واستغلال ثغرة CVE-2023-30212. CVE-2023-30212 هي ثغرة أمنية تؤثر على إصدارات OURPHP السابقة أو المساوية للإصدار 7.2.0. تسمح هذه الثغرة بهجمات Cross-Site Scripting XSS OURPHP sudo apt update sudo apt install docker.io...

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

criar um ambiente Docker vulnerável que é suscetível ao CVE 2023-30212 Descrição Ambiente Docker e exploração da vulnerabilidade CVE-2023-30212. CVE-2023-30212 é uma vulnerabilidade de segurança que afeta versões do OURPHP anteriores ou iguais a 7.2.0. Esta vulnerabilidade permite ataques de...

CVE-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

toxssin

toxssin Propósito O toxssin é uma ferramenta de teste de penetração open-source que automatiza o processo de exploração de vulnerabilidades de Cross-Site Scripting XSS. Consiste em um servidor https que atua como intérprete para o tráfego gerado pelo payload JavaScript malicioso que alimenta esta...

traxss

Traxss Scanner Automatizado de Vulnerabilidades para XSS | Escrito em Python3 | Utiliza Selenium Headless Forks DEMONSTRAÇÃO Histórico Traxss é um projeto do Hacktoberfest! Se você está procurando um lugar para contribuir, fique à vontade. Traxss é um framework automatizado para escanear URLs e...

cve-2016-4845_csrf

cve-2016-4845csrf Prova de conceito para vulnerabilidade CSRF CVE-2016-4825 no IO-DATA Recording Hard Disc Drive. Licença Estes códigos são disponibilizados sob a Licença MIT. Consulte LICENSE.txt...

CVE-2024-4367-PoC

CVE-2024-4367-PoC यह प्रूफ ऑफ कॉन्सेप्ट PoC CVE-2024-4367 भेद्यता के शोषण को प्रदर्शित करता है, जिसमें क्रॉस-साइट स्क्रिप्टिंग XSS हमले शामिल हैं। विशेषताएँ यह PoC निम्नलिखित प्रकार की जानकारी एकत्र और प्रदर्शित करता है: 1. सामान्य जानकारी: डोमेन शीर्षक वर्तमान URL रेफरर URL डोमेन से जुड़े कुकीज़...

CVE-2026-56094

The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder does not overwrite an already-registered named filter. In a shared Solr core serving multiple TYPO3 sites, a visitor ca...

EUVD-2026-65351

The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder does not overwrite an already-registered named filter. In a shared Solr core serving multiple TYPO3 sites, a visitor ca...