NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2026-83960

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specif...

CVE-2026-83958

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specif...

CVE-2026-48398

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-110080

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Successful exploitation requires user interaction , s...

CVE-2026-110079

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically when ...

CVE-2026-110078

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-110077

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specifi...

CVE-2026-110076

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically...

CVE-2026-110075

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within a victim's browser context. Successful exploitation requires user interaction , specifica...

CVE-2026-110074

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-107682

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-106632

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Successful exploitation requires user interaction , specif...

CVE-2026-106628

Adobe Experience Manager is impacted by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interact...

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html';...

PoC-CVE-2024-24035

CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

CVE-2026-76975

Due to a DOM-Based Cross-Site Scripting XSS vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper...

CVE-2026-76975

A DOM-Based Cross-Site Scripting (XSS) vulnerability exists in the SAPUI5 (Support Assistant Overlay) component. An unauthenticated attacker can generate a malicious link that, when accessed by an authenticated user, allows the execution of attacker-supplied scripts because client-side code write...