CVE-2026-45088

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the custom-payload-file field in model.Options is JSON-tagged and deserialized directly from the attacker's request body, then propagated unchanged through...

XSS-Payload-Generator

XSS-Payload-Generator user guide 0. This script is an XSS payl...

Malicious code in 0ctf-chalweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7a129ab6079febb92ceac3587af97653477bce8a65b8e85bfa5bcae0293b0d The package's entire content xss.js is a 2-line cookie-stealing payload that creates an Image element pointing to...

CVE-2022-50906

e107 CMS 3.2.1 contains an upload restriction bypass vulnerability that allows authenticated administrators to upload malicious SVG files through the media manager. Attackers with admin privileges can exploit this vulnerability to upload SVG files with embedded cross-site scripting XSS payloads...

CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

CVE-2022-27244

An issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS payload in the custom auth name. This would be executed each time the administrator modifies a user...

CVE-2019-12095

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload...

EUVD-2025-38225

Malicious code in xss-payload-7n-ctf npm...

Malicious code in xss-payload-7n-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9fcaefcc21332259306a4bbad6a54cda89ef8c6d4874d5176f4bf8f9cb194c The package xss-payload-7n-ctf was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview xss-payload-7n-ctf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2017-2613

Malware in sbrugna...

EUVD-2018-11235

Malware in sbrugna...

EUVD-2018-8204

Malware in sbrugna...

EUVD-2019-5068

Malware in sbrugna...

EUVD-2020-21619

Malware in sbrugna...

EUVD-2023-42126

Malicious code in bioql PyPI...

EUVD-2023-42129

Malicious code in bioql PyPI...

EUVD-2023-54315

Malicious code in bioql PyPI...

EUVD-2023-1950

Malicious code in bioql PyPI...

EUVD-2023-50135

Malicious code in bioql PyPI...