CVE-2024-25411

CVE-2024-25411 Una vulnerabilità di cross-site scripting XSS in Flatpress v1.3 consente agli attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel parametro username in setup.php Tipo di vulnerabilità : Cross Site Scripting XSS Vendor del prodott...

XSSTracer

XSSTracer v1.3 von 1N3 @CrowdShield https://crowdshield.com XSSTracer ist ein kleines Python-Skript, das entfernte Webserver auf Clickjacking, Cross-Frame-Scripting, Cross-Site-Tracing und Host-Header-Injection überprüft. root@kitploit: Usage: ./xsstracer...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 Se questo progetto ti aiuta, considera di supportarlo con una donazione di $10 per farlo crescere. Link: https://rzp.io/rzp/zgkC6h5B Una piattaforma interattiva e auto-ospitata per l'addestramento su XSS con 33 sfide progressivamente più difficili — progettata per...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM Riferimenti: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

nes-vuetify-cve-2025-1461

Vuetify VCalendar XSS-Schwachstellen-POC CVE-2025-1461 Dieses Repository enthält einen Proof of Concept, der die XSS-Schwachstelle in Vuetifys VCalendar-Komponente demonstriert, insbesondere in der Prop eventMoreText. Schwachstellendetails CVE-ID : CVE-2025-1461 Betroffene Versionen : =2.0.0 3.0....

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-und-CVE-2023-24204 Einleitung In der sich ständig weiterentwickelnden Landschaft der Cybersicherheit bleiben Webanwendungen ein primäres Ziel für Angreifer, die Schwachstellen ausnutzen wollen. Kürzlich wurden zwei kritische Sicherheitslücken im SourceCodester Simple Customer...

CVE-2024-3400

CVE-2024-3400 root@kitploit: import os,base64,time systempth = "/usr/lib/python3.6/site-packages/system.pth" with opensystempth,'wb' as f: f.writeb'''import...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

xss_vulnerability_challenges

Scenari di vulnerabilità XSS sfide Questo repository è una applicazione PHP dockerizzata contenente alcune sfide di vulnerabilità XSS. Le idee alla base delle sfide sono: Bypass della validazione Javascript Bypass delle entità HTML Bypass WAF Bypass della validazione della black-list Bypass della...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...

shard

shard Uno strumento da riga di comando per rilevare password condivise Utilizzo Elenca le opzioni: root@kitploit: Shard 1.5 può essere eseguito in 3 modalità: 1 Singolo utente singola password - Usa -u e -p 2 Singolo utente multiple password - Usa -u e -f 3 Utenti multipli e password multiple - U...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2025-22963

Übersicht Die Cross-Site-Request-Forgery CSRF-Sicherheitslücke in Teedy-Versionen ≤ v1.11 ermöglicht es entfernten Angreifern, einen Endbenutzer dazu zu zwingen, seine Benutzerinformationen Benutzername, Passwort usw. in der Webanwendung, in der er derzeit authentifiziert ist, zu ändern...

CVE-2025-28074

CVE-2025-28074 Descripción sugerida phpList anterior a 3.6.3 es vulnerable a Cross-Site Scripting XSS debido a una sanitización incorrecta de entrada en lt.php. La vulnerabilidad es explotable cuando la aplicación referencia dinámicamente rutas internas y procesa entrada no confiable sin escape,...

audit-xss-cve-2020-7934

CVE 2020-7934 Come eseguire CVE Requisiti 1. docker Osservazioni è possibile mettere lo script di attacco online dato il codice js http://yourjavascript.com/ Il nostro script JS online per l'attacco html Comandi per la configurazione 1. vai alla cartella radice di questo progetto 2. esegui "sudo...

Exploit-Medium-CVE-2021-41184

استغلال متوسط CVE-2021-41184 استغلال متوسط CVE-2021-41184 XSS في الخيار of من أداة .position 1. إصدار jQuery UI v1.12.1 قابل للاستغلال 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js -----------------------------------------------إثبات...

CVE-2022-23808

Exploit di phpMyAdmin Titolo Exploit : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Autore Exploit : Dipak Panchal @th3.d1p4k Homepage del Vendor : https://www.phpmyadmin.net Link del Software : https://www.phpmyadmin.net/files/5.1.1/ Versioni Affette : Le versioni di phpMyAdmin del ramo 5.1...