CVE-2019-1332

CVE-2019-1332: Cross-Site Scripting Riflesso in Microsoft SQL Server Reporting Services Esiste una vulnerabilità di cross-site scripting XSS quando Microsoft SQL Server Reporting Services SSRS non sanifica correttamente una richiesta web appositamente predisposta verso un server SSRS interessato...

CVE-2026-11747

Seres Software syWEB is affected by a Reflected XSS vulnerability caused by improper neutralization of user-supplied input during web page generation. The flaw affects versions through 27082026 . An attacker who lures a user into a crafted link can execute script in the victim's context, with a c...

CVE-2026-11747 Reflected XSS in Seres Software's syWEB

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-67134

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 XSS persistente nel plugin Grails Fields =2.2.7 Questo repository è stato utilizzato per dimostrare una proof of concept del...

CVE-2023-37979

CVE-2023-37979 Unauthentifizierte Reflected Cross-Site Scripting XSS Schwachstelle im Saturday Drive Ninja Forms Contact Form Plugin = 3.6.25 Versionen. PoC und Checker , nur zu Bildungszwecken 'python3 exploit.py https://target.com'...

CVE-2021-37833

CVE 2021-37833 Hotel Druid 3.0.2 Vulnerabilità di Cross Site Scripting Riflessa Esiste una vulnerabilità di Cross Site Scripting riflessa in più pagine della versione 3.0.2 dell'applicazione Hotel Druid che consente l'esecuzione arbitraria di comandi JavaScript...

CVE-2017-6913

CVE-2017-6913 Questa è una vulnerabilità che ho trovato nella webmail di open-xchange OX App Suite https://www.open-xchange.com/ qualche tempo fa. Dettagli della vulnerabilità La webmail era vulnerabile a uno stored XSS all'apertura di un'email, a causa del fatto che gli attributi evento del tag...

CVE-2019-19651

CVE-2019-19651 Chevereto XSS riflesso in Nome sito, titolo documento e descrizione - 1.0.0 - 1.1.4 Free, Impostazioni - Nome sito, Titolo documento sito, Descrizione sito Inserendolo, verrà riflesso su tutto il sito per tutti gli utenti root@kitploit: "ChevtChevt...

CVE-2023-36163

Exploit-Titel: BuildaGate5library - Reflektiertes Cross-Site Scripting XSS Datum: 06/07/2023 Exploit-Autor: Idan Malihi Hersteller-Startseite: Keine Version: 5 Getestet auf: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: Ein Angreifer muss den verwundbaren Parameter mc= finden und den JS-Code...

CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub-Repository mit Dockerfile und Dateien, um eine angreifbare Umgebung für CVE-2023-30212 zu erstellen, die die Untersuchung der Ausnutzbarkeit dieser Sicherheitslücke ermöglicht. Ideal für Forschung und Sicherheitsbegeisterte, um die Auswirkungen der Schwachstelle in einer...

CVE-2022-3949

CVE-2022-3949 XSS in Simple Cashiering System Simple Cashiering System è vulnerabile a Cross Site Scripting XSS - un attore malintenzionato può modificare il nome completo di un utente compromesso in un payload XSS e ogni volta che un amministratore visita la scheda utente o la scheda vendite e...

CVE-2026-81814

Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could store HTML or script-capable content that is later interpreted by the browser when another user views the calendar. Th...

CVE-2026-81753

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2026-66155

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-5738 Reflected XSS in BilPark's DoXBASE

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026. NOTE: The vendor was contacted early about this disclosur...

CVE-2026-5738

DoXBASE by BilPark Informatics Technologies Industry and Trade Inc. is affected by a reflected cross-site scripting (XSS) vulnerability, described as enabling Cross Zone Scripting due to improper input neutralization during web page generation. The issue affects DoXBASE versions through 27082026 ...

xssor2

XSS'OR XSS'OR - Hacken mit JavaScript. ONLINE Du kannst es ausprobieren: https://xssor.io and http://xssor.io/ Es enthält drei Hauptmodule: Encode/Decode, Codz, Probe. INSTALLATION Python 3 mit Django 3.0. oder Python 2 mit Django 1.11. git clone https://github.com/evilcos/xssor2 or download...

CVE-2024-5420-XSS

Descrizione Una vulnerabilità è stata trovata in utnserver Pro, utnserver ProMAX e INU-100 versione 20.1.22 e precedenti, che interessa il parametro di descrizione del dispositivo nell'interfaccia web. Questo difetto permette cross-site scripting XSS persistente, consentendo agli attaccanti di...

EUVD-2026-67014

Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could store HTML or script-capable content that is later interpreted by the browser when another user views the calendar. Th...