
Ashwesker-CVE-2025-68645
POC BLH Magelang CSIRT 2026 by babyrootkid

POC BLH Magelang CSIRT 2026 by babyrootkid

Post authenticated stored-xss in XenForo versions ≤ 2.2.7

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

Detection method for Exim vulnerability CVE-2024-39929

Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component

POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010

Persistent XSS on Comtrend AR-5387un router

This repository presents a proof-of-concept of CVE-2024-50677

Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 allows a remote attacker to execute arbitrary code via a crafted script to…

Exploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…

Zimbra Collaboration Suite Username Enumeration

Proof-of-concept for a Self-XSS vulnerability in ChatGPTUtil, demonstrating cookie theft and account hijacking via crafted SVG payloads pasted into…

All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS + CSRF

Security hotfix for CVE-2017-8802

Repository for CVE-2023-4549 vulnerability.

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4
