CVE-2023-30943

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求所有被恐怖组织哈马斯劫持为人质的公民安全返回。在所有被劫持者获释并安全回家之前，我们绝不罢休。你也可以帮助他们回家。https://stories.bringthemhomenow.net/ CVE-2023-30943 Moodle漏洞利用 本仓库包含了针对 Moodle（一种广泛使用的开源学习管理系统）两个漏洞的组合利用代码。这些利用代码演示了如何利用漏洞实现未经身份验证的任意文件夹创建，进而导致存储型跨站脚本攻击（Stored...

CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0 Stored XSS in pagesaddacctype.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 due to unsanitized input in the name parameter in pagesaddacctype.php. Attackers can store malicious...

CVE-2023-3009

CVE-2023-3009 Stored XSS on item name - Bypassing CVE-2023-2516 in TeamPass 3.0.9 - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the nilsteampassnet/teampass application, which was assigned the CVE-2023-2516 identifier. The vulnerability can be...

CVE-2024-46538

This post is a research article published by EQSTLab. Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae Description...

CVE-2023-31779

CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...

CVE-2025-61183

CVE-2025-61183 通过不安全的 SVG 处理在用户头像上传中实现存储型 XSS 概述 在 vaahcms 中发现了一个存储型跨站脚本（XSS）漏洞，具体存在于 MediaController.php 中的文件上传逻辑与 UserBase.php 中的 storeAvatar 方法之间的交互中，允许低权限的注册用户上传包含嵌入式 JavaScript 的恶意 SVG 文件。该漏洞源于文件存储发生在内容或 MIME 类型验证 之前 ，导致恶意文件留在服务器上可预测且可公开访问的路径中。 该漏洞源于 MediaController.php 中的 upload 方法 $path =...

CVE-2020-25627

CVE-2020-25627 Stored XSS via moodlenetprofile parameter in user profile My PoC about this CVE User requirement: Student Or the site for registeration XSS in moodlenetprofile root@kitploit: Step 1: Log in with an authenticated user Can register or through creating a new user without assigning rol...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Multiple Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu. The payload will be executed...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...

CVE-2021-44217

CVE-2021-44217 Suggested description In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

CVE-2020-25399

CVE-2020-25399 InterMind iMind Server 至 3.13.65 版本中存在存储型 XSS 漏洞，允许任何用户通过聊天功能发送恶意文件来劫持其他用户的会话。 信息 描述：攻击者可利用聊天功能向任何用户发送恶意文件。文件可能包含 JS 负载，在受害者打开文件后于其浏览器中执行。 研究人员：Andrey Skuratov https://github.com/h3llraiser/ 发现日期：2020-07-06（初始公告） 公开发布： VEL 链接：即将提供 NIST CVE 链接：即将提供 截图：...

CVE-2023-33829

CVE-2023-33829: Stored-XSS-on-SCM-Manager-1.60 Summary A vulnerability is discovered in the SCM Manager 1.2 = 1.60 version that allows an attackers previously authenticated with write permissions execute javascript code in specific fields. This Proof of Concept is maded in a local environment...

CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "firstname" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious acto...

reports

This folder contains some vulnerability reports I have disclosed over time. Barracuda Networks Load Balancer ADC - Multiple vulnerabilities CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - Stored XSS CVE-2015-1389 Network Solution WebMail - Multiple vulnerabilities Responsible...

CVE-2025-12135

WPBookit getparam'csscode'; $jscode= $request-getparam'jscode'; updateoption 'wpbcustomcodedata', 'csscode' = $csscode, 'jscode' = $jscode ; Code execution from /core/shortcodes/class-wpbookit-shortcode-abstract.php:20-27: root@kitploit: $wpbcustomcode= getoption 'wpbcustomcod...

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Cross-Site Scripting XSS Vulnerability Confirmed on 1.6.1 older versions likely affected Description: Found that the web application stores and displays user-supplied input without proper input validation or encoding. This leading to a malicious code...

CVE-2025-26159

CVE-2025-26159 このスクリプトは、明示的な許可が与えられた認可された環境でのみ使用されるべきです。作者は、このスクリプトの使用に起因する誤用、損害、または結果について一切の責任を負いません。 このスクリプトは、CVE-2025-26159の悪用の一環として、Cookieをデコード、フィルタリング、抽出します。 使用法 悪用の手順を理解するには、私のブログのこの記事を確認してください。 root@kitploit: go run CVE-2025-26159.go Laravelスターターのタグ名フィールドに、次のペイロードを追加します。 root@kitploit:...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Stored Cross-Site Scripting XSS Description Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the Name parameter of /vehicle-management/booking.php. A malicious actor can inject malicious payloads into the Name...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2023-43873-e107-CMS-Stored-XSS---Manage

e107 CMS Stored XSS v2.3.2 Author: Sergio Description: Cross Site Scripting XSS vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu. Attack Vectors: Scripting A vulnerability in the sanitization of the entry...