Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

CVE-2023-30212

CVE-2023-30212 إعداد المختبر المتطلبات الأساسية تحميل docker.io sudo apt install -y docker.io الخطوات 1. قم بتنزيل جميع الملفات من مستودعي باستخدام الأمر التالي. git clone https://github.com/AAsh035/CVE-2023-30212.git 2. الآن لإنشاء صورة Docker، قم بتشغيل الأمر التالي: sudo docker build -t vuln...

XSSTRON

XSSTRON, Navegador Electron JS para encontrar vulnerabilidades XSS Potente navegador Chromium para encontrar vulnerabilidades XSS automáticamente mientras navegas por la web, puede detectar muchos casos de uso con soporte también para solicitudes POST Instalación Install Node.js and npm...

CVE-2022-39197-patch

CVE-2022-39197 patch CVE-2022-39197 Cobalt Strike XSS 漏洞的一个临时补丁 通过 hook javax.swing.plaf.basic.BasicHTML的isHTMLString方法来禁用swing的html支持 PS: 部分依赖html的页面无法正常渲染例如 关于页面 使用方法 将 patch.jar 放入cobaltstrike启动目录下 在cobaltstrike启动参数中加入javaagent 启用补丁 -javaagent:patch.jar 启动cobaltstrike 输出Successfully Patched...

CVE-2017-6913

CVE-2017-6913 This is a vulnerability I found in open-xchange OX App Suite's webmail https://www.open-xchange.com/ a while back. Vulnerability details The webmail was vulnerable to a stored XSS when opening an email, due to the event attributes of the HTML time tag not being properly filtered...

CVE-2023-28467

MyBB 1.8.33 User CP email persistent XSS - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com Solution Upgrade MyBB version 1.8.34 or higher...

CVE-2026-87915-PoC-pwnVader

CVE-2026-87915 — Popup Maker = 1.24.0 — Unauthenticated stored XSS valuesName Author: pwnVader · License: MIT repository root | ---|--- Component| Popup Maker – Boost Sales, Conversions, Optins, Subscribers WordPress plugin Type| CWE-79 — Stored Cross-Site Scripting Affected| = 1.24.0 Fixed| 1.25...

CVE-2026-50980

CVE-2026-50980: DNS-Based Cross-Site Scripting XSS & Session Hijacking in oPanel Overview CVE ID: CVE-2026-50980 Product: oPanel Affected Versions: v1.20.25 Vulnerability Type: Stored Cross-Site Scripting XSS via DNS / Session Hijacking Severity: High CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N...

xss

This repository does not have a README...

CVE-2025-57310

CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Base Score: 8.8 High...

XSS-Scanner

XSS Scanner Cross-Site Scripting XSS es una de las vulnerabilidades de aplicaciones web más conocidas. Incluso tiene un capítulo dedicado en el proyecto OWASP Top 10 y es una vulnerabilidad muy buscada en programas de bug bounty. El escáner recibe un enlace del usuario y analiza el sitio web en...

Cobaltstrike-RCE-CVE-2022-39197

Cobaltstrike RCE Vulnerability CVE-2022-39197 Reproduction Vulnerability Brief This vulnerability exists in the Cobalt Strike Beacon software and may allow an attacker to set a malformed username in the Beacon configuration, triggering XSS, which can lead to remote code execution on the Cobalt...

JSshell

JSshell - versión 3.1 JSshell - un reverse shell de JavaScript. Se utiliza para ejecutar código JS de forma remota, explotar XSS ciego, ... Requisitos: Cualquier sistema operativo + Python 2 o Python 3 Novedades en JSshell versión 3.1 Actualizado en la nueva versión de JSshell 3.1: Nuevo comando...

dalfox

Dalfox هو أداة مفتوحة المصدر قوية تركز على الأتمتة، مما يجعلها مثالية للفحص السريع عن ثغرات XSS وتحليل المعاملات. تم تصميم محرك الاختبار المتقدم وميزاته المتخصصة لتبسيط عملية اكتشاف الثغرات والتحقق منها. الميزات الرئيسية الأوامر الفرعية: scan URL / ملف / أنبوب / raw-HTTP، يتم اكتشافه تلقائيًا،...

CVE-2023-24278

CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex Overview CVE ID: CVE-2023-24278 Affected Products: Squidex versions prior to 7.4.0 Reported By: Ioannis Christodoulakos This repository provides information and an exploit for two Reflected Cross-Site Scripting XSS vulnerabilities discover...

CVE-2021-43141

CVE-2021-43141 Information about CVE-2021-43141, a reflected XSS in the planapplication section...

apidetector

APIDetector es una herramienta potente y eficiente diseñada para probar endpoints Swagger expuestos en varios subdominios con capacidades inteligentes únicas para detectar falsos positivos. Es particularmente útil para profesionales de la seguridad y desarrolladores que realizan pruebas de API y...

CVE-2024-33231

Ferozo Webmail XSS Vulnerability via File Upload CVE-2024-33231 Description Ferozo Webmail version 1.1 is vulnerable to Cross-Site Scripting XSS through the file upload functionality. An attacker can exploit this vulnerability by uploading a specially crafted file containing malicious JavaScript...

CVE-2022-32132

CVE-2022-32132 لـ osTicket | نظام تذاكر الدعم XSS المنعكسة: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

AWE

AWE: Adaptive Agents for Dynamic Web Penetration Testing Akshat Singh Jaswal · Ashish Baghel Accepted at NDSS LAST-X 2026 Abstract Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating softwa...