6161 matches found
burp-dom-scanner
Burp DOM 扫描器 这是一个 Burp Suite 的扩展，用于对单页应用进行递归爬取和扫描。 它会运行一个 Chromium 浏览器来扫描网页中的基于 DOM 的 XSS。 它还可以收集爬取期间发出的所有请求（XHR、fetch、websocket 等），允许将它们转发到 Burp 的 Proxy、Repeater 和 Intruder。 需要 node 和 DOMDig。 下载 最新版本可以在此下载。 安装 1. 安装 node 2. 安装 DOMDig 3. 下载并加载扩展 4. 在扩展的 UI 中设置 node 可执行文件的路径以及 domdig.js 的路径。 扫描引擎...
burp-dom-scanner
Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...
Yonyou U8 13.0 - Cross-Site Scripting
Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...
VDO.Ninja - DOM-Based Cross-Site Scripting
VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...
Hoppscotch <= 2026.2.1 - Open Redirect
Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...
NoXss
NoXss NoXss 是一款跨站脚本漏洞扫描器，支持反射型 XSS 和基于 DOM 的 XSS。它速度极快，适合测试数百万个 URL。已在 Bug Bounty 计划中发现了一些 XSS 漏洞。 功能特点 快速且适合测试数百万个 URL 支持基于 DOM 的 XSS（使用 Chrome 或 Phantomjs）和反射型 XSS 目前仅使用 8 个基于注入位置的 Payload（非模糊测试，更精准，更快） 异步请求（使用 gevent）和多进程 支持单个 URL、文件和来自 Burpsuite 的流量 基于接口的流量过滤 支持特殊头部（referer、cookie、自定义 token 等...
CVE-2024-30956
CVE-2024-30956 参见 https://www.lauyan.com/en/toweb-updates.htmliyFEw37D （基于 DOM 的 XSS）TOWeb 5 例如 http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP 访问该 URL，JS 代码将被执行 附注：src 目录包含相关 HTML/JS 代码的副本，因为 TOWeb 是闭源的，不付费无法下载旧版本。...
PoC-CVE-2024-24035
CVE-2024-24035 标题：SIL 3.1 在“hmessage”参数中存在跨站脚本（XSS）漏洞。 日期：2024-01-14 作者：Elizeu Das Dores 厂商主页：https://www.setorinformatica.com/ 版本：3.1 POC CVE-2024-24035 “hmessage”参数存在基于 DOM 的跨站脚本（XSS）漏洞。...
CVE-2017-7038
CVE-2017-7038 Safari XSS（CVE-2017-7038）https://support.apple.com/en-us/HT207923 Document 实现 XSS 漏洞 var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html'; var xhr = new...
CVE-2021-24891-Simulation
一个实践性的、容器化的实验室环境，用于模拟和利用 Elementor Website Builder WordPress 插件中的基于 DOM 的跨站脚本（XSS）漏洞，标识为 CVE-2021-24891。 📖 关于该漏洞 该实验室演示了 WordPress Elementor 插件（版本低于 3.4.8）中的一个基于 DOM 的跨站脚本（XSS） 漏洞。该漏洞的产生是因为 Elementor 编辑器的客户端代码直接从 URL 的哈希（...）中读取数据，并将其附加到页面的文档对象模型（DOM）中，而没有进行适当的清理。 攻击者可以构造一个恶意链接，在哈希片段中包含 JavaScrip...
WordPress All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by mak3bread in WordPress Plugin All In One SEO Pack versions = 5.0.1.1...
WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin LearnPress versions = 4.4.7...
WordPress Ivory Search – WordPress Search Plugin plugin <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by @nacento in WordPress Plugin Ivory Search versions = 5.5.18...
WordPress Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Calculated Fields Form versions = 5.5.1.5...
WordPress Visitor Traffic Real Time Statistics plugin <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin Visitors Traffic Real Time Statistics versions = 8.16...
CVE-2021-42558
CVE-2021-42558: MITRE Caldera 中的多个跨站脚本漏洞 Caldera（版本 =2.8.1）包含多个反射型、存储型和自 XSS 漏洞，这些漏洞可能被已认证和未认证的攻击者利用。 厂商披露： 该漏洞的厂商披露可在此处找到。 要求： 此漏洞需要： 部分 XSS 需要有效的用户凭据 概念验证： 更多详情和利用过程可参见此 PDF。 附加信息： XSS 向量“1.1. Agent 中未认证的存储型 XSS”也被并行发现，并由 Daniel "uruwhy" Matthews 在此 Caldera 提交 中修复。...
CVE-2026-97341
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress plugin is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.5.1.5 . The flaw arises from insufficient input sanitization and output escaping within the arbitrary (whichever names the admin ...
EUVD-2026-91920
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...