wiki-xss-test

Test Security Repo alert'...

Malicious code in @itsreduxtm/unpkg-xss-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39614132e3675ec887b41aa6834ac54cce90e248d43f008345444b86e1870d82 payload.js is declared as the package main and runs an IIFE immediately on require/import. It fetches a wordlist of Linux binary names from...

MAL-2026-13431 Malicious code in @itsreduxtm/unpkg-xss-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39614132e3675ec887b41aa6834ac54cce90e248d43f008345444b86e1870d82 payload.js is declared as the package main and runs an IIFE immediately on require/import. It fetches a wordlist of Linux binary names from...

MAL-2022-7301 Malicious code in xss-test-gaurav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4856cf0b438d50d75a5861d08893b7b28643488276db12e9ba3e2d0bb6b1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xss-test-gaurav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4856cf0b438d50d75a5861d08893b7b28643488276db12e9ba3e2d0bb6b1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)

Exploit Title: Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting XSS Authenticated Date: 24.02.2022 Exploit Author: Fikrat Ghuliev Ghuliev Vendor Homepage: https://cipi.sh/ Software Link: https://cipi.sh/ Version: 3.1.15 Tested on: Ubuntu When the user wants to add a new server on the...

Mail Security Tester - A Testing Framework For Mail Security And Filtering Solutions

A testing framework for mail security and filtering solutions. IMPORTANT: Don't do anything evil with this! Tests of cloud or otherwise hosted solutions should always be approved by the tested provider. Only use your own test accounts and don't annoy anyone with a load of test mails. Installation...

Addressbook 8.1.24.1 / 8.2.5 Cross Site Scripting

Instructions. After authentication, click on the Group tab at the top. Click on the New Group Button on the group page. For the group name the first field enter the following XSS test string: alertString.fromCharCode88,83,83 Then call the XSS string from the URL -- technically one calls the group...

XSS Bug in printable link display

A Cross sites scripting vulnerability exists in macro used to render the 'printable' link. Here is an exploit for the vulnerability that works https://servername/wiki/display/a/2007/09/%22%3E%3Cscript%3Ealert'Watchfire%20XSS%20Test%20Successful'%3C/script%3E Bug was found using APPScan...