CVE-2026-113661

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default configuration that allows meta refresh elements and their http-equiv and content attributes can retain unsafe script...

element-fragment-guest

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · element-fragment-guest element-fragment-guest Element Web v1.12.29 - Element / New Vector Class: Session destruction Reach: Remote Lifecycle.loadSession prefers guestuserid and guestaccesstoken from the URL hash over...

CVE-2026-113657 ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...

CVE-2026-113657

The sanitize-html library (versions 2.17.7 through 2.18.0 ) used by ApostropheCMS contains a vulnerability where an application configuration permitting namespace-prefixed SVG animation elements can bypass SMIL URL protection . Because prefixed tag names do not match the unprefixed animation-elem...

BurpCrypto

BurpCrypto Burpcrypto is a collection of burpsuite encryption plug-ins, supporting AES/RSA/DES/ExecJsexecute JS encryption code in burpsuite. English | 简体中文 Build $ mvn package Usage Download the precompiled jar package from Releases. Add this jar package to your burpsuite's Extensions. Switch to...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

JSpector

JSpector JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JSpector, you need to have Jython installed on Burp Suite. Installation 1. Download...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

CVE-2026-28330

The SolarWinds Observability Self-Hosted platform is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows authenticated attackers to inject malicious content or JavaScript into the system. The injected script is then displayed or executed in the browsers of oth...

CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

CVE-2026-34212

CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I identified, responsibly disclosed, and reproduced a High-severity stored XSS issue in Docmost , the...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

CVE-2026-2763-POC

Vulnerability The vulnerability arises from the implementation of the for-in syntax. The scope of a for-in loop is represented by a pair of bytecodes: JSOP::Iter and JSOP::EndIter. CASEIter MOZASSERTREGS.stackDepth = 1; HandleValue val = REGS.stackHandleAt-1; JSObject iter = ValueToIteratorcx, va...

endext

EndExt EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look fo...

bassmaster-rce

bassmaster-rce Exploiting CVE-2014-7205 by injecting arbitrary JavaScript resulting in Remote Code Execution. I stumbled across this Post by LuuPhu written in viatnamese. Since I have written some code in NodeJS but never came across exploiting it, I figured why not today? The Python PoC includes...

dj

dj - Dynamic JS File Extractor 中文 | English dj intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code, including webpack chunks, import lazy loading, and more. Features Deep analysis of website HTML and JS to extract dynamically loaded JavaScrip...

blindxss-lite

blindxss-lite A lightweight Blind XSS Cross-Site Scripting collector and payload server built with Flask. It serves a JavaScript payload that captures victim browser data cookies, localStorage, DOM snippets, etc. and forwards it to a SQLite-backed dashboard protected by HTTP Basic Auth. Features...

keypair

keypair Generate a RSA PEM key pair from pure JS Usage var keypair = require'keypair'; var pair = keypair; console.logpair; outputs $ node example.js public: '-----BEGIN RSA PUBLIC...

ditto

ditto Powershell Obfuscator Ditto is a Powershell and JavaScript obfuscator base on tree-sitter-powershell and tree-sitter-javascript. Command Line Usage Basic Command Structure ditto-cli options CLI Arguments & Options Short Option| Long Option| Description ---|---|--- -h| --help| Display help...