162 matches found
HackTools
Добро пожаловать в HackTools ! — — — —...
Tiny-XSS-Payloads
Tiny-XSS-Payloads Коллекция коротких XSS-пейлоадов, которые можно использовать в разных контекстах. Демо доступно здесь: https://tinyxss.terjanq.me Текущие пейлоады root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit:...
payloads
페이로드 모든 페이로드를 Git으로! 웹 공격 페이로드 모음입니다. 풀 리퀘스트는 언제나 환영합니다! 사용법 외부 페이로드를 다운로드하고 압축된 페이로드 파일을 압축 해제하려면 ./get.sh를 실행하세요. 페이로드 출처 fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists - https://github.com/danielmiessler/SecLists xsuperbug - https://github.com/xsuperbug/payloads NickSanzotta -...
XSS-Payloads
이 저장소에는 README가 없습니다...
AwesomeXSS
AwesomeXSS 이 저장소는 Awesome XSS 리소스 모음입니다. 기여는 언제나 환영하며, 이슈issue를 통해 제출해 주시기 바랍니다. Awesome 목차 챌린지 읽을거리 & 발표 도구 마인드맵 DOM XSS 페이로드 폴리글롯 태그 및 이벤트 핸들러 컨텍스트 탈출 HTML 컨텍스트 속성 컨텍스트 JavaScript 컨텍스트 Confirm 변형 익스플로잇 탐색 우회 인코딩 팁 & 요령 Awesome 챌린지 prompt.ml alf.nu/alert1 xss-game.appspot.com polyglot.innerht.ml...
weaponised-XSS-payloads
Weaponised XSS Payloads XSSペイロードはalert1をP1に変えるために設計されました。 ブログ記事 このリポジトリは「How to Upgrade Your XSS Bugs from Medium to Critical」というタイトルのブログ記事とともに公開されました。 https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 これは何か？...
xss-payload-list
xss-payload-list 🎯 크로스 사이트 스크립팅XSS 취약점 페이로드 목록...
EUVD-2026-48273
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
CVE-2023-31434
The parameters nutzertitel, nutzervn, and nutzernn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations...
CVE-2025-23213
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and svg. Both can contain malicious content XSS Payloads. This vulnerability is fixed in 1.5.28...
CVE-2025-67341
jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users...
CVE-2025-11504
The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently us...
CVE-2025-11504 Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure
The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently us...
CVE-2025-11504
CVE-2025-11504 concerns the Quickcreator – AI Blog Writer plugin for WordPress. Affected versions 0.0.9–0.1.17 expose the plugin’s API key via the /wp-content/plugins/quickcreator/dupasrala.txt file, enabling unauthenticated access. The exposure permits attackers to obtain the API key and use it ...
PT-2025-43593
Name of the Vulnerable Software and Affected Versions Quickcreator – AI Blog Writer plugin for WordPress versions 0.0.9 through 0.1.17 Description The Quickcreator – AI Blog Writer plugin for WordPress is susceptible to exposure of sensitive information. An unauthenticated attacker can access the...
EUVD-2021-11241
Malware in sbrugna...
EUVD-2021-11507
Malware in sbrugna...