Popular repositories

1. CVE-2020-9484 CVE-2020-9484 Public

   Apache Tomcat RCE (CVE-2020-9484)

   Python 4 3

2. XSS_Privilege_Escalation.js XSS_Privilege_Escalation.js Public

   Privilege escalation exploit code for XSS vulnerability

   JavaScript 2 1

3. email_change_exploit_xss.js email_change_exploit_xss.js Public

   This is a sample exploit for exploiting an XSS vulnerability that changes the user email. This bypasses some CSRF protections as the page was revoking the CSRF protections when refreshed.

   JavaScript 2

4. password_vault_exploit.js password_vault_exploit.js Public

   XSS Exploit code for retrieving passwords stored in a Password Vault

   JavaScript 2 1

5. CVE-2019-10779 CVE-2019-10779 Public

   GCHQ Stroom is vulnerable to Cross-Site Scripting due to the ability to load the Stroom dashboard on another site and insufficient protection against window event origins.

   HTML 1 1