IceWarp WebMail 11.3.1.5 - Cross-Site Scripting

IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language parameter. id: CVE-2017-7855 info: name: IceWarp WebMail 11.3.1.5 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2025-2712 info: name: Yonyou UFIDA ERP-NC V5.0 -...

WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting

The plugin is affected by a cross-site scripting vulnerability within the "visibility" parameter. id: CVE-2021-25055 info: name: WordPress FeedWordPress 2022.0123 - Authenticated Cross-Site Scripting author: DhiyaneshDK severity: medium description: | The plugin is affected by a cross-site...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

Kentico-Xperience-before-13.0.178---XSS-POC

Dieses Repository hat keine README-Datei...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Benvenuti nel repository ufficiale che documenta la scoperta e i dettagli della CVE-2025-26206 , una critica vulnerabilità di Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0. Scoperta da B. Sibhi , quest...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Umgebung herunterladen, entpacken und hineinwechseln root@kitploit: unzip cve-2024-4367-lab cd cve-2024-4367-lab Startbefehl für die Umgebung root@kitploit: mkdir upload chmod 777 upload docker-compose up -d...

Tiredful-API

Was ist die Tiredful API? Tiredful API ist eine absichtlich fehlerhaft gestaltete Anwendung. Ziel dieser Web-App ist es, Entwicklern, QA-Ingenieuren oder Sicherheitsexperten die Schwachstellen in Webservices REST API zu vermitteln, die durch unsichere Programmierpraktiken entstehen. Wer kann...

cPanel-CVE-2023-29489

POC für cPanel CVE-2023-29489 XSS Payload...

CVE-2024-21338-1

CVE-2024-21338 Questo PoC è stato sviluppato per il contest XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

rayhunter

Rayhunter Rayhunter è un progetto per rilevare gli IMSI catcher, noti anche come simulatori di stazione base cellulare o stingray. È stato inizialmente progettato per funzionare su un hotspot mobile economico chiamato Orbic RC400L, ma grazie agli sforzi della comunità, può supportare anche altri...

hackazon

Hackazon Hackazon é um site de teste vulnerável gratuito, uma loja virtual construída com as mesmas tecnologias usadas nos aplicativos modernos ricos e móveis. O Hackazon possui uma interface AJAX, workflows rigorosos e APIs RESTful usadas por um aplicativo móvel complementar, fornecendo um...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2025-0133

Beschreibung: Es handelt sich um einen POC für CVE-2025-0133, der nur auf PAN-OS-Firewall-Konfigurationen mit einem aktivierten GlobalProtect-Gateway oder -Portal anwendbar ist. Es prüft mit einer benutzerdefinierten Threadanzahl die Schwachstelle auf mehreren URLs, die aus einer Datei eingelesen...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-82090

Pocket for Android (versions through 8.33.0.0 ) is affected by a Cross-Site Scripting (XSS) vulnerability rated CVSS 4.0 9.2 (CRITICAL) . The root cause is that the "Save to Pocket" feature injects external HTML into the DOM, allowing injected JavaScript to alter the application state via native ...

EUVD-2026-67403

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-30691

CVE-2026-30691 - Avviso di vulnerabilità Dettagli ufficiali del record di vulnerabilità MITRE e documentazione tecnica per CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggerita descrizione Vulnerabilità di Cross-Site Scripting XSS in @cyntler/react-doc-viewer...

ransomwatch

RansomWatch RansomWatch è uno strumento di monitoraggio dei siti di fuga di dati ransomware. Scansiona tutte le voci presenti su vari siti di fuga ransomware, memorizza i dati in un database SQLite e invia notifiche tramite Slack o Discord quando compare una nuova vittima o quando una vittima vie...