WordPress Plugin WP-Paginate 2.1.3 – ‘preset’ Vulnerable to Stored XSS
The WordPress plugin WP-Paginate 2.1.3 suffers from a Stored Cross Site Scripting vulnerability(XSS). Currently their is not an updated version.
Tag: xss
WordPress Core 5.2.2 Suffers – ‘post previews’ XSS Cross Site Scripting Vulnerability
Currently WordPress Core Version 5.2.2 suffers from cross site scripting vulnerability located within “post previews”. Flaw is fixed by upgrading to WordPress version
FinDOM-XSS – Find potential DOM based XSS vulnerability
Installation Dependencies: LinkFinder Usage To run the tool on a target, just use the following command. This will run the tool against domain.tld. URLs can also be piped to findom-xss and scan on them. For […]
Go CGI / FastCGI Transport Cross Site Scripting
The CGI and FastCGI implementations in the Go standard library behave differently from the HTTP server implementation when serving content. In contrast to the documented behavior, they may return non-HTML data as HTML. This may […]
XSpear is XSS Scanner on ruby gems
Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser (with Selenium) Testing request/response for XSS protection bypass and reflected(or all) params Reflected Params All params(for blind xss, anytings) Filtered […]
XSSer Automated Detection, Exploitation, and Reporting Framework for XSS Vulnerabilities
Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. It provides several options to try to bypass certain filters and various special techniques for code […]
WordPress NexosReal Estate Theme 1.7 Cross Site Scripting / SQL Injection
# Exploit Title: WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection # Google Dork: inurl:/wp-content/themes/nexos/ # Date: 2020-06-17 # Exploit Author: Vlad Vector # Vendor: Sanljiljan [ https://themeforest.net/user/sanljiljan ] # Software Version: 1.7 # […]
MyBB 1.8.17 – Cross-Site Scripting
# Exploit Title: MyBB 1.8.17 – Cross-Site Scripting # Date: 2018-08-11 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://mybb.com/download/ # Version: 1.8.17 # Tested on: Ubuntu 18.04 # CVE: CVE-2018-15596 […]
WAScan – Web Application Scanner
WAScan ((W)eb (A)pplication (Scan)ner) is a Open Source web application security scanner. It is designed to find various vulnerabilities using “black-box” method, that means it won’t study the source code of web applications but will […]
