CVE-2015-3140

This exploit demonstrates CSRF and stored XSS vulnerabilities in SynTail 1.5 Build 566. It includes PoC HTML forms that submit malicious payloads to create a new file bundle or user, leveraging persistent JSESSIONID for authentication bypass.

The exploit demonstrates CSRF and stored XSS vulnerabilities in Syncrify Server 3.6 Build 833. It includes PoC HTML snippets that leverage CSRF to modify SMTP settings and administrator passwords, as well as stored XSS payloads in user fields and email configurations.

This exploit demonstrates CSRF and stored XSS vulnerabilities in SynaMan 3.4 Build 1436. It includes PoC code for creating a shared folder and a new user via CSRF, as well as identifying multiple stored XSS vulnerabilities in various input fields.