Lucene search
+L

10862 matches found

Kitploit
Kitploit
added 2026/09/02 1:19 a.m.5 views

reDOM

reDOM root@kitploit: ██████╗ ███████╗██████╗ ██████╗ ███╗ ███╗ ██╔══██╗██╔════╝██╔══██╗██╔═══██╗████╗ ████║ ██████╔╝█████╗ ██║ ██║██║ ██║██╔████╔██║ ██╔══██╗██╔══╝ ██║ ██║██║ ██║██║╚██╔╝██║ ██║ ██║███████╗██████╔╝╚██████╔╝██║ ╚═╝ ██║ ╚═╝ ╚═╝╚══════╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝ A Burp Suite extension...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 11:14 p.m.4 views

xsssniper

XSSSNIPER xsssniper 是一个方便的 XSS 发现工具,具有批量扫描功能。 使用方法: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS number of threads...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 11:14 p.m.69 views

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 10:31 p.m.4 views

jsonorg-fp3

Falso positivo de json.org CVE-2022-45688 El proyecto contiene una dependencia json.org con CVE-2022-45688. Invoca la clase vulnerable, pero los datos de entrada están sanitizados con un método simple de contar caracteres , estimando así la profundidad máxima del árbol DOM a generar, y aplicando...

7.5CVSS6.7AI score0.01181EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/01 10:25 p.m.4 views

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 10:11 p.m.2 views

htcap

HTCAP htcap 是一个能够通过拦截 Ajax 调用和 DOM 变化递归爬取单页应用程序(SPA)的 Web 应用扫描器。 主要功能 递归 DOM 爬取引擎 发现 ajax/fetch/jsonp/websocket 请求 支持 cookies、代理、自定义头部、HTTP 认证等 基于文本相似性的启发式页面去重引擎 可脚本化的登录序列 所有发现结果保存到 SQLite 数据库,并可导出为交互式 HTML 报告 内置的模糊测试器可检测 SQL 注入、XSS、命令执行、文件泄露等多种漏洞 可以轻松与 Sqlmap、Arachni、Wapiti、Burp 等众多工具接口...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 10:11 p.m.215 views

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 8:53 p.m.58 views

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 8:17 p.m.5 views

CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

5.4CVSS6.1AI score0.00857EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 8:12 p.m.4 views

CVE-2025-55182

CVE-2025-55182 Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. ⚠️ Disclaimer This document is provided strictly for educational, defensive, and authorized security research purposes. Do NOT attempt to exploit systems or applications without explicit...

10CVSS7.5AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/09/01 7:57 p.m.3 views

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing root@kitploit: Unpack src.zip zip -r src.zip src Build an...

10CVSS7AI score0.99802EPSS
SaveExploits388References1
Kitploit
Kitploit
added 2026/09/01 7:25 p.m.259 views

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:25 p.m.2 views

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...

10CVSS7AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/09/01 6:25 p.m.5 views

CVE-2022-45472

CVE-2022-45472 XSS basado en DOM Software: CAE Learning Space Enterprise con licencia Intuity Versión de imagen: 267r Nivel de parche: 639 Vulnerabilidad: XSS basado en DOM Descripción El software de gestión CAE Learning Space Enterprise es vulnerable a un ataque de XSS basado en DOM. Un ataque d...

5.4CVSS6.1AI score0.00522EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 4:51 p.m.3 views

CVE-2026-64638

CVE-2026-64638 // XSS2Shell Análisis técnico y matriz de mitigación defensiva para el vector CVE-2026-64638 XSS2Shell, una inconsistencia crítica en el parsing de la pantalla de autenticación de WordPress Core que permite encadenar un Cross-Site Scripting XSS reflejado pre-autenticación con...

8.9CVSS7.4AI score0.31204EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/01 4:47 p.m.141 views

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 4:25 p.m.2 views

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

6AI score
SaveExploits0References27
NVD
NVD
added 2026/09/01 3:17 p.m.4 views

CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

8.7CVSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/01 2:41 p.m.4 views

EUVD-2026-69234

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic paths can cause denial of service. In lib/sax.js, parseElementStartPart...

8.7CVSS5.9AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/01 2:29 p.m.3 views

EUVD-2026-69220

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the shared reg builder in lib/grammar.js compiles the anchored QNameexact validator with the multiline flag, so ^ and $ validate only one line instead of the complete...

8.7CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder