accept no compromises

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 15,135

XSS Files

WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting

Posted Sep 20, 2017

Authored by Ricardo Sanchez

WordPress 2kb Amazon Affiliates Store plugin versions 2.1.0 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | ed7cc9ee351abba47e1139929002ac68

Download | Favorite | Comments (0)

Apple Security Advisory 2017-09-19-1

Posted Sep 20, 2017

Authored by Apple | Site apple.com

Apple Security Advisory 2017-09-19-1 - iOS 11 is now available and addresses cross site scripting, denial of service, and various other vulnerabilities.

tags | advisory, denial of service, vulnerability, xss

systems | cisco, apple, ios

advisories | CVE-2017-7072, CVE-2017-7085, CVE-2017-7088, CVE-2017-7089, CVE-2017-7097, CVE-2017-7106, CVE-2017-7118, CVE-2017-7133

MD5 | 9ee202aa152d60cfa872edd8b90b9234

Download | Favorite | Comments (0)

SUSE/Portus 2.2 Cross Site Scripting

Posted Sep 19, 2017

Authored by Ricardo Sanchez

SUSE/Portus version 2.2 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

systems | linux, suse

MD5 | 45c4673d073bbdcf395b309bad7cd3d0

Download | Favorite | Comments (0)

D-Link DGS-3000-10TC Cross Site Scripting / Content Spoofing

Posted Sep 19, 2017

Authored by MustLive

D-Link DGS-3000-10TC suffers from cross site scripting and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss

MD5 | 3f6dd9f19a9efc47f919300380d1a65a

Download | Favorite | Comments (0)

SilverStrip CMS 3.5.3 Cross Site Scripting

Posted Sep 15, 2017

Authored by Siddhartha Tripathy | Site sec-consult.com

SilverStripe CMS versions 3.5.3 and below suffer from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | 4488225884421348eca56ef59a92eb22

Download | Favorite | Comments (0)

iTech Book Store Script 2.02 XSS / SQL Injection

Posted Sep 13, 2017

Authored by 8bitsec

iTech Book Store Script version 2.02 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | 62a7f280e96ba5d35c2638715bfb3d2f

Download | Favorite | Comments (0)

JGI CMS 1.0 Cross Site Scripting

Posted Sep 11, 2017

Authored by Renzi

JGI CMS version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | ae187dd188a176155bf3e966259837d6

Download | Favorite | Comments (0)

D-Link 850L XSS / Backdoor / Code Execution

Posted Sep 8, 2017

Authored by Pierre Kim

D-Link 850L suffers from cross site scripting, access bypass, backdoor, bruteforcing, information disclosure, remote code execution, and denial of service vulnerabilities. Basically, do not use this device unless you want to analyze it to see how not to design something.

tags | exploit, remote, denial of service, vulnerability, code execution, xss, info disclosure, csrf

MD5 | 806b47aee2ece40feb77375c1dcacc3d

Download | Favorite | Comments (0)

WordPress Training Membership 1.0.8 Cross Site Scripting

Posted Sep 8, 2017

Authored by 8bitsec

WordPress Fitness Trainer - Training Membership plugin versions 1.0.8 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | a5296a2e992e7a24cea620dc13451720

Download | Favorite | Comments (0)

CMS Showcase 1.0 Cross Site Scripting

Posted Sep 8, 2017

Authored by Renzi

CMS Showcase version 1.0 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 5d11519fb46a0665b18c2da1518aa1ee

Download | Favorite | Comments (0)

Roteador Wirelsss Intelbras WRN150 Cross Site Scripting

Posted Sep 8, 2017

Authored by Elber Tavares

Roteador Wireless Intelbras WRN150 router suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2017-14219

MD5 | 56852b23bbeef599a0cff5b7d4dbf92b

Download | Favorite | Comments (0)

EE 4GEE Wireless Router EE60_00_05.00_25 XSS / CSRF / Disclosure

Posted Sep 8, 2017

Authored by James Hemmings

EE 4GEE wireless router version EE60_00_05.00_25 suffers from cross site request forgery, cross site scripting, and information disclosure vulnerabilities.

tags | exploit, vulnerability, xss, info disclosure, csrf

MD5 | c4b9a415add552983b5133ebe5cfad74

Download | Favorite | Comments (0)

IWEBSOUL CMS 1.0 Cross Site Scripting

Posted Sep 7, 2017

Authored by Renzi

IWEBSOUL CMS version 1.0 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 1bb059a3c04d173392bc1620657df949

Download | Favorite | Comments (0)

WordPress Contact Form 7 International SMS Integration 1.2 XSS

Posted Sep 7, 2017

Authored by M.R.S.L.Y

WordPress Contact Form 7 International SMS Integration plugin version 1.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 0b9ec0c731a198bb020a35fd2e3d8722

Download | Favorite | Comments (0)

WordPress Cool Flickr Slideshow 1.0 Cross Site Scripting

Posted Sep 7, 2017

Authored by M.R.S.L.Y

WordPress Cool Flickr Slideshow plugin version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 18c891fbfd15b9e7b0347e9f5327ed53

Download | Favorite | Comments (0)

Subrion CMS 4.1.5 Cross Site Scripting

Posted Sep 7, 2017

Authored by M.R.S.L.Y

Subrion CMS version 4.1.5 suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 384913df20ce390bd7b36d3f2088e221

Download | Favorite | Comments (0)

Red Hat Security Advisory 2017-2645-01

Posted Sep 6, 2017

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2017-2645-01 - Spacewalk is an Open Source systems management solution that provides system provisioning, configuration and patching capabilities. Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and the remote management of multiple Linux deployments with a single, centralized tool. Security Fix: A cross-site scripting flaw was found in how an organization name is displayed in Satellite 5. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.

tags | advisory, remote, xss

systems | linux, redhat

advisories | CVE-2017-7538

MD5 | 5381202cd81df2db09eac6c815aa2b9b

Download | Favorite | Comments (0)

WordPress Gym Management System 07-05-2017 Code Execution / Cross Site Scripting

Posted Sep 6, 2017

Authored by 8bitsec

WordPress Gym Management System versions 07-05-2017 and below suffer from code execution and cross site scripting vulnerabilities.

tags | exploit, vulnerability, code execution, xss

MD5 | ee0add2453bdeb49c0645ae5427b8c19

Download | Favorite | Comments (0)

WordPress Ads Pro 3.4 Cross Site Scripting / SQL Injection

Posted Sep 6, 2017

Authored by 8bitsec

WordPress Ads Pro plugin versions 3.4 and below suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | 2585980fb280f489ad4c4eafbadabe5d

Download | Favorite | Comments (0)

Ultimate HR System 1.2 Cross Site Scripting / Directory Traversal

Posted Sep 5, 2017

Authored by 8bitsec

Ultimate HR System versions 1.2 and below suffer from cross site scripting and directory traversal vulnerabilities.

tags | exploit, vulnerability, xss, file inclusion

MD5 | 7ef8c382c84bd564a779cefd35abf93a

Download | Favorite | Comments (0)

Wibu Systems AG CodeMeter 6.50 Cross Site Scripting

Posted Sep 4, 2017

Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Wibu Systems AG CodeMeter version 6.5.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

MD5 | a66315820ceaaf2c22257fd6afa45f2d

Download | Favorite | Comments (0)

WordPress WpJobBoard 4.5.1 Cross Site Scripting

Posted Sep 4, 2017

Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

WordPress WpJobBoard plugin version 4.5.1 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 944d77250531ecfca6ed4fe86d4bbd3b

Download | Favorite | Comments (0)

FineCMS 1.0 Cross Site Scripting / SQL Injection

Posted Sep 1, 2017

Authored by sohaip-hackerDZ

FineCMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | e0e0805a0ab9f68d76db0eb249f9af22

Download | Favorite | Comments (0)

MISP 2.4.79 Cross Site Scripting

Posted Aug 28, 2017

Authored by Cedric van Bockhaven, Jurgen Jans

MISP (Malware Information Sharing Platform and Threat Sharing) versions 2.4.79 and below suffer from a cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2017-13671

MD5 | 48c1325c037dabcc6976b7e66d262524

Download | Favorite | Comments (0)

BlackBoard LMS 9.1.140152.0 XSS / File Upload

Posted Aug 24, 2017

Authored by Ismail Doe

BlackBoard LMS version 9.1.140152.0 suffers from a cross site scripting vulnerability that can be leveraged through an arbitrary file upload.

tags | exploit, arbitrary, xss, file upload

MD5 | 47c8d7b954b0a809a7d3aef677b80ea4

Download | Favorite | Comments (0)