exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 17,005

XSS Files

WordPress Admin Columns Cross Site Scripting

Posted Jun 22, 2021

Authored by Johannes Lauinger

WordPress Admin Columns plugin versions below 5.5.2 Pro and 4.3.2 Pro suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-24365

MD5 | c897aa331ad29744b3a5484196319ba3

Download | Favorite | View

Simple CRM 3.0 Cross Site Scripting

Posted Jun 20, 2021

Authored by Riadh Benlamine

Simple CRM version 30 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | f93a62b1f7f334d944c71d1a34837176

Download | Favorite | View

ICE Hrm 29.0.0.OS Cross Site Scripting

Posted Jun 18, 2021

Authored by Piyush Patil, Rafal Lykowski

ICE Hrm version 29.0.0.OS suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 467e6bc1bde72521c3f63dd3386a473c

Download | Favorite | View

ICE Hrm 29.0.0.OS Cross Site Scripting / Session Fixation

Posted Jun 18, 2021

Authored by Piyush Patil, Rafal Lykowski

ICE Hrm version 29.0.0.OS suffers from cross site scripting and session fixation vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 078282fa8d120a39367312e15585f560

Download | Favorite | View

Red Hat Security Advisory 2021-2479-01

Posted Jun 17, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-2479-01 - Red Hat OpenShift Container Storage is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat OpenShift Container Storage is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. Issues addressed include a cross site scripting vulnerability.

tags | advisory, xss

systems | linux, redhat

advisories | CVE-2016-10228, CVE-2017-14502, CVE-2019-13012, CVE-2019-14866, CVE-2019-25013, CVE-2019-2708, CVE-2019-3842, CVE-2019-9169, CVE-2020-13434, CVE-2020-13543, CVE-2020-13584, CVE-2020-13776, CVE-2020-15358, CVE-2020-24977, CVE-2020-25659, CVE-2020-25678, CVE-2020-26116, CVE-2020-26137, CVE-2020-27618, CVE-2020-27619, CVE-2020-27783, CVE-2020-28196, CVE-2020-29361, CVE-2020-29362, CVE-2020-29363, CVE-2020-36242, CVE-2020-8231

MD5 | ab1ddf71e1b9a05b6be7d4ee52a51220

Download | Favorite | View

Cotonti Siena 0.9.19 Cross Site Scripting

Posted Jun 16, 2021

Authored by Fatih Ilgin

Cotonti Siena version 0.9.19 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | fe6d3b4a9e6544ba9518f2b65ef4a9b1

Download | Favorite | View

Red Hat Security Advisory 2021-2445-01

Posted Jun 16, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-2445-01 - Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. The ceph-ansible package provides Ansible playbooks for installing, maintaining, and upgrading Red Hat Ceph Storage. The tcmu-runner packages provide a service that handles the complexity of the LIO kernel target's userspace passthrough interface. It presents a C plugin API for extension modules that handle SCSI requests in ways not possible or suitable to be handled by LIO's in-kernel backstores. Issues addressed include cross site scripting and remote shell upload vulnerabilities.

tags | advisory, remote, shell, kernel, vulnerability, xss

systems | linux, redhat

advisories | CVE-2020-27839, CVE-2021-20288, CVE-2021-3509

MD5 | 85ea76bb9cb8685462bfec50fb41841f

Download | Favorite | View

Teachers Record Management System 1.0 Cross Site Scripting

Posted Jun 16, 2021

Authored by nhattruong

Teachers Record Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 5a28d092e9d867e89c133c9325a57ec7

Download | Favorite | View

Client Management System 1.1 Cross Site Scripting

Posted Jun 15, 2021

Authored by BHAVESH KAUL

Client Management System version 1.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 2f83c7f0a1aba3af2fad9aae911255b4

Download | Favorite | View

Accela Civic Platform 21.1 Cross Site Scripting / Open Redirection

Posted Jun 14, 2021

Authored by Abdulazeez Alaseeri

Accela Civic Platform version 21.1 suffers from cross site scripting and open redirection vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2021-34370

MD5 | a066317a2d9548a91e801a3ee0b6503b

Download | Favorite | View

COVID-19 Testing Management System 1.0 Cross Site Scripting

Posted Jun 14, 2021

Authored by BHAVESH KAUL

COVID-19 Testing Management System version 1.0 suffers from a persistent cross site scripting vulnerability. This is a variant of the original discovery of cross site scripting in this version made by Rohit Burke in May of 2021.

tags | exploit, xss

MD5 | 4187b42d6504e72f4ca2e37f3a66ffa4

Download | Favorite | View

Accela Civic Platorm 21.1 Cross Site Scripting

Posted Jun 11, 2021

Authored by Abdulazeez Alaseeri

Accela Civic Platform version 21.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-33904

MD5 | 4426c8e419b8183b106a3d4a84a244d5

Download | Favorite | View

Backdoor.Win32.Zombam.gen Cross Site Scripting

Posted Jun 11, 2021

Authored by malvuln | Site malvuln.com

Backdoor.Win32.Zombam.gen malware suffers from a cross site scripting vulnerability.

tags | exploit, xss

systems | windows

MD5 | ca8225ecf55fc009491ec97bd9a106ef

Download | Favorite | View

Cerberus FTP Web Service 11 Cross Site Scripting

Posted Jun 11, 2021

Authored by Mohammad Hossein Kaviyany

Cerberus FTP Web Service version 11 suffers from a persistent cross site scripting vulnerability.

tags | exploit, web, xss

MD5 | 61f6e591d6e2aff86feea989a63f76e2

Download | Favorite | View

TextPattern CMS 4.8.7 Cross Site Scripting

Posted Jun 10, 2021

Authored by Mert Das

TextPattern CMS version 4.8.7 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 0a2466e19f21b12c56173ee10106824b

Download | Favorite | View

WordPress Visitors-App 0.3 Cross Site Scripting

Posted Jun 9, 2021

Authored by Mesut Cetin

WordPress Visitors-App plugin version 0.3 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 6a44e77f41ca425ab34453bff4fae337

Download | Favorite | View

Truth Of Cross Site Scripting

Posted Jun 7, 2021

Authored by Abishekraghav Murugeashan

Whitepaper called Truth of Cross Site Scripting. It gives an overview of types of cross site scripting and how the attacks are achieved.

tags | paper, xss

MD5 | e2a52d31c9bb09c3eb8635ed745660a8

Download | Favorite | View

WordPress Smart Slider-3 3.5.0.8 Cross Site Scripting

Posted Jun 5, 2021

Authored by Hardik Solanki

WordPress Smart Slider-3 plugin version 3.5.0.8 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 3f02ab5c7a9e2da15d2909b4f43ff52b

Download | Favorite | View

4Images 1.8 Cross Site Scripting

Posted Jun 3, 2021

Authored by Piyush Patil

4Images version 1.8 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-27308

MD5 | 4674a7f7a4902040e42fa9c804d23d17

Download | Favorite | View

FUDForum 3.1.0 Cross Site Scripting

Posted Jun 3, 2021

Authored by Piyush Patil

FUDForum version 3.1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-27519, CVE-2021-27520

MD5 | 09961b6dcea24331be0b45002ad2a4c4

Download | Favorite | View

Seo Panel 4.8.0 Cross Site Scripting

Posted Jun 2, 2021

Authored by Piyush Patil

Seo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2021-28420, CVE-2021-28417, CVE-2021-28418

MD5 | f29cbc15c279c29991670ff09c9c1cda

Download | Favorite | View

CHIYU IoT Cross Site Scripting

Posted Jun 1, 2021

Authored by sirpedrotavares

CHIYU IoT devices suffer from multiple cross site scripting vulnerabilities. Versions affected include BF-430, BF-431, BF-450M, BF-630, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC.

tags | exploit, vulnerability, xss

advisories | CVE-2021-31250, CVE-2021-31641, CVE-2021-31643

MD5 | be521ba12f3652a10a9d3371e8b27108

Download | Favorite | View

WordPress WP Prayer 1.6.1 Cross Site Scripting

Posted Jun 1, 2021

Authored by Bastijn Ouwendijk

WordPress WP Prayer plugin version 1.6.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | a68a7b64369f6b1a3d49b44df9c98526

Download | Favorite | View

Postbird 0.8.4 XSS / LFI / Insecure Data Storage

Posted Jun 1, 2021

Authored by Tridentsec | Site tridentsec.io

Postbird version 0.8.4 suffers from cross site scripting, local file inclusion, and insecure data storage vulnerabilities. Included in this archive is a whitepaper and proof of concept exploit.

tags | exploit, local, vulnerability, xss, proof of concept, file inclusion

advisories | CVE-2021-33570

MD5 | f60c4ad77076831e6c6210dffcd07d54

Download | Favorite | View

WordPress LifterLMS 4.21.0 Cross Site Scripting

Posted May 28, 2021

Authored by Captain_hook

WordPress LifterLMS plugin version 4.21.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-24308

MD5 | c047b79bb03f1a1f0db714247c79a29b

Download | Favorite | View