what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 15,915

XSS Files

WordPress Download Manager 2.9.93 Cross Site Scripting

Posted Apr 17, 2019

Authored by ThuraMoeMyint

WordPress Download Manager plugin version 2.9.93 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 6e44af3b213e221b3464bac7bebfa674

Download | Favorite | Comments (0)

2 Plan Team 1.0.4 Cross Site Scripting

Posted Apr 17, 2019

Authored by indoushka

2 Plan Team version 1.0.4 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 3c0b8ec591a4e6cc09486fd5e2af39d7

Download | Favorite | Comments (0)

Ubuntu Security Notice USN-3948-1

Posted Apr 16, 2019

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3948-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

tags | advisory, remote, web, denial of service, arbitrary, javascript, code execution, xss

systems | linux, ubuntu

advisories | CVE-2019-11070, CVE-2019-8518, CVE-2019-8536, CVE-2019-8559

MD5 | afdf0e0cecca2a8868662e6759e344de

Download | Favorite | Comments (0)

Zyxel ZyWall Cross Site Scripting

Posted Apr 16, 2019

Authored by Aaron Bishop

ZyWall 310, ZyWall 110, USG1900, ATP500, and USG40 devices suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2019-9955

MD5 | 6a488936efef77d973078a35e0209519

Download | Favorite | Comments (0)

Seo Panel Newsletter 1.2.0 Cross Site Scripting

Posted Apr 15, 2019

Authored by Deyaa Muhammad

Seo Panel Newsletter plugin version 1.2.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 5d39d7af66210de8dfcf530bc65fae09

Download | Favorite | Comments (0)

WordPress Download Manager 2.9.92 Cross Site Scripting

Posted Apr 15, 2019

Authored by ThuraMoeMyint

WordPress Download Manager plugin version 2.9.92 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | bb8b5efd41990f8b6901e44dfe22b53d

Download | Favorite | Comments (0)

Raptor WAF 0.6

Posted Apr 14, 2019

Authored by coolervoid

Raptor is a web application firewall written in C that uses DFA to block SQL injection, cross site scripting, and path traversals.

Changes: Fixed error handlers. Improved and fixed all socket connections.

tags | tool, web, firewall, xss, sql injection

systems | unix

MD5 | 8e5555cd8660e9301c79a579e3ef6dbc

Download | Favorite | Comments (0)

DirectAdmin 1.561 Cross Site Scripting

Posted Apr 12, 2019

Authored by Numan OZDEMIR

DirectAdmin versions 1.561 and below suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2019-11193

MD5 | 55fb7c5c8f2bb42df534a00528ddba62

Download | Favorite | Comments (1)

Nagios XI 5.5.10 XSS / Remote Code Execution

Posted Apr 12, 2019

Authored by Abdel Adim Oisfi

Various vulnerabilities have been found in Nagios XI version 5.5.10, which allow a remote attacker able to trick an authenticated victim (with "autodiscovery job" creation privileges) to visit a malicious URL to obtain a remote root shell via a reflected cross site scripting, an authenticated remote code Execution and a local privilege escalation.

tags | exploit, remote, shell, local, root, vulnerability, code execution, xss

advisories | CVE-2019-9164, CVE-2019-9165, CVE-2019-9166, CVE-2019-9167, CVE-2019-9202, CVE-2019-9203, CVE-2019-9204

MD5 | a57f6817171de50e793d88c586dbe05c

Download | Favorite | Comments (0)

D-Link DI-524 2.06RU Cross Site Scripting

Posted Apr 10, 2019

Authored by Semen Alexandrovich Lyhin

D-Link DI-524 version 2.06RU suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2019-11017

MD5 | 4f32fb60b928f8bf7c467862c210cd05

Download | Favorite | Comments (0)

EasyIO 30P Authentication Bypass / Cross Site Scripting

Posted Apr 9, 2019

Authored by Daniel Ricardo dos Santos

EasyIO 30P versions prior to 2.0.5.27 suffer from authentication bypass and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, bypass

advisories | CVE-2018-15819, CVE-2018-15820

MD5 | 3003284b7edcf2a24469c156220e0180

Download | Favorite | Comments (0)

Loytec LGATE-902 XSS / Traversal / File Deletion

Posted Apr 9, 2019

Authored by Daniel Ricardo dos Santos

Loytec LGATE-902 versions prior to 6.4.2 suffer from cross site scripting, arbitrary file deletion, and directory traversal vulnerabilities.

tags | exploit, arbitrary, vulnerability, xss, file inclusion

advisories | CVE-2018-14916, CVE-2018-14918, CVE-2018-14919

MD5 | bf196a89942c4e399ed9ea256488aabb

Download | Favorite | Comments (0)

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) Cross Site Scripting

Posted Apr 8, 2019

Authored by DKM

CentOS Web Panel versions 0.9.8.793 (Free) and 0.9.8.753 (Pro) suffer from an email field persistent cross site scripting vulnerability.

tags | exploit, web, xss

systems | linux, centos

advisories | CVE-2019-10893

MD5 | f6f57efa6c03ff289d3e61cb9a33b3f3

Download | Favorite | Comments (0)

ShoreTel Connect ONSITE Cross Site Scripting / Session Fixation

Posted Apr 7, 2019

Authored by Ramikan

ShoreTel Connect ONSITE versions prior to 19.49.1500.0 suffer from cross site scripting and session fixation vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2019-9591, CVE-2019-9592, CVE-2019-9593

MD5 | b932ff88a665f3b5cddd128f7f22e77d

Download | Favorite | Comments (0)

Dell EMC IsilonSD Management Server 1.1.0 Cross Site Scripting

Posted Apr 5, 2019

Authored by Dell Product Security Incident Response Team | Site dellemc.com

Dell EMC IsilonSD Management Server version 1.1.1 contains fixes for two cross site scripting (XSS) security vulnerabilities, which could potentially be exploited by malicious users to compromise the affected system.

tags | advisory, vulnerability, xss

advisories | CVE-2019-3708, CVE-2019-3709

MD5 | 926c23acead65bbcb12e6f8d6db13a6e

Download | Favorite | Comments (0)

Fiverr Clone Script 1.2.2 Cross Site Scripting / SQL Injection

Posted Apr 1, 2019

Authored by Mr Winst0n

Fiverr Clone Script version 1.2.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | aa633fc8b896ed59cd8c18665450b533

Download | Favorite | Comments (0)

zStore 1.10 Cross Site Scripting

Posted Apr 1, 2019

Authored by indoushka

zStore version 1.10 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 4c00e0738e3016954ee20c83582c53d5

Download | Favorite | Comments (0)

zipperSNAP 7.0.28 Cross Site Scripting

Posted Apr 1, 2019

Authored by indoushka

zipperSNAP version 7.0.28 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 99bcb1b503333f00561cf36a8f07c26d

Download | Favorite | Comments (0)

CentOS Web Panel 0.9.8.789 Cross Site Scripting

Posted Mar 29, 2019

Authored by DKM

CentOS Web Panel version 0.9.8.78 suffers from a persistent cross site scripting vulnerability.

tags | exploit, web, xss

systems | linux, centos

advisories | CVE-2019-10261

MD5 | f8dd24fc9d2d944a62b8241eb836aa56

Download | Favorite | Comments (1)

Pydio 8 Command Execution / Cross Site Scripting

Posted Mar 29, 2019

Authored by Leandro Cuozzo, Ramiro Molina | Site secureauth.com

Pydio 8 suffers from cross site scripting, command injection, and various other vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2019-10045, CVE-2019-10046, CVE-2019-10047, CVE-2019-10048, CVE-2019-10049

MD5 | 4bbf5f61cb3b1078960683a0b5c13dbc

Download | Favorite | Comments (0)

i-doit 1.12 Cross Site Scripting

Posted Mar 28, 2019

Authored by BlackFog Team

i-doit version 1.12 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2019-6965

MD5 | 43baf78151f86975afafbcd6d9d1306c

Download | Favorite | Comments (0)

Rukovoditel ERP And CRM 2.4.1 Cross Site Scripting

Posted Mar 27, 2019

Authored by Javier Olmedo

Rukovoditel ERP and CRM version 2.4.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2019-7400

MD5 | 8c4bf9a039de5f232ce02740747bb195

Download | Favorite | Comments (0)

SJS Simple Job Script SQL Injection / Cross Site Scripting

Posted Mar 27, 2019

Authored by Ahmet Umit Bayram

SJS Simple Job Script suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | 41062db55bc5321f09135587b0233241

Download | Favorite | Comments (0)

Apple Security Advisory 2019-3-25-6

Posted Mar 26, 2019

Authored by Apple | Site apple.com

Apple Security Advisory 2019-3-25-6 - iCloud for Windows 7.11 is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

tags | advisory, overflow, vulnerability, code execution, xss

systems | windows, apple, 7

advisories | CVE-2019-6201, CVE-2019-6232, CVE-2019-6236, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8542, CVE-2019-8544, CVE-2019-8551, CVE-2019-8556, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563

MD5 | 98634585031983c9f7d62cc137cb5956

Download | Favorite | Comments (0)

Apple Security Advisory 2019-3-25-1

Posted Mar 26, 2019

Authored by Apple | Site apple.com

Apple Security Advisory 2019-3-25-1 - iOS 12.2 is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

tags | advisory, overflow, vulnerability, code execution, xss

systems | apple, ios

advisories | CVE-2019-6201, CVE-2019-6204, CVE-2019-6207, CVE-2019-6222, CVE-2019-6237, CVE-2019-7284, CVE-2019-7285, CVE-2019-7292, CVE-2019-7293, CVE-2019-8502, CVE-2019-8503, CVE-2019-8504, CVE-2019-8505, CVE-2019-8506, CVE-2019-8510, CVE-2019-8511, CVE-2019-8512, CVE-2019-8514, CVE-2019-8515, CVE-2019-8516, CVE-2019-8517, CVE-2019-8518, CVE-2019-8521, CVE-2019-8523, CVE-2019-8524, CVE-2019-8527, CVE-2019-8529, CVE-2019-8530

MD5 | 727901ea88f6dbca6487f96d0b7cc181

Download | Favorite | Comments (0)