what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 101 - 125 of 18,369

XSS Files

Gitea 1.22.0 Cross Site Scripting

Posted Aug 29, 2024

Authored by Catalin Iovita, Alexandru Postolache

Gitea version 1.22.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2024-6886

SHA-256 | 679d63e8928338a2795080c2e8acf6c63870fd815e5470dd05c9c71ca4c12184

Download | Favorite | View

Notemark 0.13.0 Cross Site Scripting

Posted Aug 29, 2024

Authored by Alessio Romano

Notemark versions 0.13.0 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2024-41819

SHA-256 | 5412263751c127d8cb7add8025ce80555d79296e588f9ff7d5b2a2c6c1a17c8a

Download | Favorite | View

Calibre Web 0.6.21 Cross Site Scripting

Posted Aug 26, 2024

Authored by Catalin Iovita, Alexandru Postolache

Calibre Web version 0.6.21 suffers from a persistent cross site scripting vulnerability.

tags | exploit, web, xss

advisories | CVE-2024-39123

SHA-256 | 686e04b8fe52c5725bda61d40bbca828f80088e743ec7a871989a6041a45b1d0

Download | Favorite | View

Helpdeskz 2.0.2 Cross Site Scripting

Posted Aug 26, 2024

Authored by Md. Sadikul Islam

Helpdeskz version 2.0.2 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | a8ac91a3cbedb116396a5b53757d88970af60c29a929c87cc0d371c438839a2e

Download | Favorite | View

Jobs Finder System 1.0 Cross Site Scripting

Posted Aug 26, 2024

Authored by indoushka

Jobs Finder System version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | faf5a6f2bdf5a78896fae3a3733b2215bd787d63633b35a18fdd4238dbc3d2b4

Download | Favorite | View

Human Resource Management System 2024 1.0 Cross Site Scripting

Posted Aug 26, 2024

Authored by indoushka

Human Resource Management System version 2024 version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 25f4d7b7ca25178696d74bb308a9abcdd65caa3fc6c471e46b4b16febaa084ea

Download | Favorite | View

OX App Suite Cross Site Scripting / Denial Of Service

Posted Aug 23, 2024

Authored by Martin Heiland

OX App Suite frontend version 7.10.6-rev42 suffers from cross site scripting vulnerabilities. OX App Suite backend versions 7.10.6-rev61 and 8.22 suffer from a denial of service vulnerability.

tags | advisory, denial of service, vulnerability, xss

advisories | CVE-2021-41184, CVE-2024-25582, CVE-2024-25710

SHA-256 | 6e2623da412af99e461937edfe417e674fe26af8c59f680b4bb1489413794ba8

Download | Favorite | View

OX App Suite Frontend 7.10.6-rev44 Cross Site Scripting

Posted Aug 23, 2024

Authored by Martin Heiland

OX App Suite frontend version 7.10.6-rev44 suffers from a cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2024-4367

SHA-256 | 1360b972ed80fc23c7c8b3b040403a512a3915dd0f5a8e6e9c5792c83a0e4c39

Download | Favorite | View

PlantUML 1.2024.6 Cross Site Scripting

Posted Aug 23, 2024

Authored by Hosein Vita

PlantUML version 1.2024.6 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 28cd588466b21f30b2a0db0072c4c78aa0532c61f088d9cdb521bb89e9c81e26

Download | Favorite | View

Ubuntu Security Notice USN-6969-1

Posted Aug 20, 2024

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6969-1 - It was discovered that Cacti did not properly apply checks to the "Package Import" feature. An attacker could possibly use this issue to perform arbitrary code execution. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. It was discovered that Cacti did not properly sanitize values when using javascript based API. A remote attacker could possibly use this issue to inject arbitrary javascript code resulting into cross-site scripting vulnerability. This issue only affected Ubuntu 24.04 LTS.

tags | advisory, remote, arbitrary, javascript, code execution, xss

systems | linux, ubuntu

advisories | CVE-2024-25641, CVE-2024-29894, CVE-2024-31443, CVE-2024-31444, CVE-2024-31445, CVE-2024-31458, CVE-2024-31459, CVE-2024-31460, CVE-2024-34340, CVE-2024-34360

SHA-256 | 569974f66e44cbbc04571591151988d6a9b0642234fd900881b7bd97af4003b0

Download | Favorite | View

WordPress Shield Security 20.0.5 Cross Site Scripting

Posted Aug 16, 2024

Authored by Tim Lepp | Site github.com

WordPress Shield Security plugin versions 20.0.5 and below cross site scripting exploit that adds an administrative user.

tags | exploit, xss

advisories | CVE-2024-7313

SHA-256 | 705e2276f9150db10c6e5b1e68e86831e4cde8ecf32c63988f9cecbbcc2e80d0

Download | Favorite | View

Giftora 1.0 Cross Site Scripting

Posted Aug 16, 2024

Authored by indoushka

Giftora version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 571b1691f68912443e4375f4b2eeed71940910d33468d76246e2f0a264a6ff84

Download | Favorite | View

Farmacia Gama 1.0 Cross Site Scripting

Posted Aug 15, 2024

Authored by indoushka

Farmacia Gama version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 2caf36ad25ddb5e5fcd4a26fd8ac2e62e0dee3d76fbd95e698130d2b8730632e

Download | Favorite | View

Covid-19 Contact Tracing System 1.0 Cross Site Scripting

Posted Aug 15, 2024

Authored by indoushka

Covid-19 Contact Tracing System version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | daa17a59d2ea2f605f71d11b3ba6860a33f90c5ea08d666ce8a3af42e59af5fa

Download | Favorite | View

Car Rental Management System 1.0 Cross Site Scripting

Posted Aug 15, 2024

Authored by indoushka

Car Rental Management System version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 5fa10fefdc9cde30dce20a655fe24cebef24d4c036fcbee0b4bb1c708bc895ed

Download | Favorite | View

WordPress MapFig Studio 0.2.1 Cross Site Request Forgery / Cross Site Scripting

Posted Aug 13, 2024

Authored by Vuln Seeker Cybersecurity Team

WordPress MapFig Studio plugin versions 0.2.1 and below suffer from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | bb373228013ea4da17857eacb046e2ed58e688e52aab0abc39365db5b8ba412c

Download | Favorite | View

Debian Security Advisory 5743-2

Posted Aug 13, 2024

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5743-2 - Multiple cross-site scripting vulnerabilities were discovered in RoundCube webmail.

tags | advisory, vulnerability, xss

systems | linux, debian

advisories | CVE-2024-42008, CVE-2024-42009, CVE-2024-42010

SHA-256 | 5f8dfd77f70bc46b1b413f2ff2f11fba302881ec002792cfe6fc0a48263c564b

Download | Favorite | View

WordPress Profilepro 1.3 Cross Site Scripting

Posted Aug 13, 2024

Authored by Vuln Seeker Cybersecurity Team

WordPress Profilepro plugin versions 1.3 and below suffer from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 668088aaae0dfd4b8b6db629ceeb041239e3ddf9233ec6d6aa0f3004259f968c

Download | Favorite | View

WordPress PVN Auth Popup 1.0.0 Cross Site Scripting

Posted Aug 13, 2024

Authored by Vuln Seeker Cybersecurity Team

WordPress PVN Auth Popup plugin version 1.0.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 0f8377dd916fdca1fa0da6fa1d350a2c8fe955fa8474d24cf307c6f650dcf065

Download | Favorite | View

E-Commerce Site Using PHP PDO 1.0 Cross Site Scripting

Posted Aug 9, 2024

Authored by indoushka

E-Commerce Site using PHP PDO version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, php, xss

SHA-256 | a0a49d707e94769813f1c6a29ac04549cac15c49f09121ae5f66e9cb83e89f35

Download | Favorite | View

Journyx 11.5.4 Cross Site Scripting

Posted Aug 8, 2024

Authored by Jaggar Henry | Site korelogic.com

Journyx version 11.5.4 suffers from a cross site scripting vulnerability due to mishandling of the error_description during an active directory login flow.

tags | exploit, xss

advisories | CVE-2024-6892

SHA-256 | 9a80a13f999f61d2fbcd9c872ce0429b0fdbb765e1d12b15c39ea815ad17aa65

Download | Favorite | View

Debian Security Advisory 5743-1

Posted Aug 8, 2024

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5743-1 - Multiple cross-site scripting vulnerabilities were discovered in RoundCube webmail.

tags | advisory, vulnerability, xss

systems | linux, debian

advisories | CVE-2024-42008, CVE-2024-42009, CVE-2024-42010

SHA-256 | 970fd144f14ffdaa83e5c6cc86eacd48e01236a520860f38e257832c63d9d519

Download | Favorite | View

Open WebUI 0.1.105 Persistent Cross Site Scripting

Posted Aug 8, 2024

Authored by Jaggar Henry, Sean Segreti | Site korelogic.com

Open WebUI version 0.1.105 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2024-6706

SHA-256 | 658c9c08ea4ec4d262623596aacd371e3b13671c5709eaa27c2e69d347ea9ae5

Download | Favorite | View

Microweber 2.0.15 Cross Site Scripting

Posted Aug 6, 2024

Authored by Prerak Mittal

Microweber version 1.0 suffers from a cross site scripting vulnerability in the search functionality. Original discovery of cross site scripting in this version is attributed to tmrswrr in June of 2024.

tags | exploit, xss

advisories | CVE-2024-40101

SHA-256 | 11a4dd9de7525c844e43c8d43e13f0c963f37436c9c8206149ac94ab931b82ba

Download | Favorite | View

Codeprojects E-Commerce 1.0 Cross Site Scripting

Posted Aug 6, 2024

Authored by indoushka

Codeprojects E-Commerce version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 78cea0fc70361f9ace9ab64346beec9683d01581b47379eca655e32c2e3f8179

Download | Favorite | View