NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

PoC-CVE-2024-24035

CVE-2024-24035 Título The SIL 3.1 es vulnerable a Cross Site Scripting XSS en el parámetro "hmessage". Fecha: 2024-01-14 Autor: Elizeu Das Dores Página del proveedor: https://www.setorinformatica.com/ Versión: 3.1 POC CVE-2024-24035 El parámetro "hmessage" es vulnerable a DOM Based Cross Site...

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayloa...

burp-dom-scanner

Burp DOM Scanner Es una extensión de Burp Suite que permite el rastreo recursivo y el escaneo de Aplicaciones de Página Única. Ejecuta un navegador Chromium para escanear la página web en busca de XSS basado en DOM. También puede recopilar todas las solicitudes XHR, fetch, websockets, etc. emitid...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...

Yonyou U8 13.0 - Cross-Site Scripting

Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

Hoppscotch <= 2026.2.1 - Open Redirect

Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...

CVE-2024-30956

CVE-2024-30956 cf https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM-based XSS HTML Injection vulnerability in TOWeb version 5 eg http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navigate to the url, the JS code is executed PS: src contains a copy ...

CVE-2021-42558

CVE-2021-42558: Múltiples Cross-Site Scripting en MITRE Caldera Caldera versiones =2.8.1 contiene múltiples vulnerabilidades XSS reflejadas, almacenadas y propias que pueden ser explotadas por atacantes autenticados y no autenticados. Divulgación del proveedor: La divulgación del proveedor para...

CVE-2022-45472

CVE-2022-45472 XSS basado en DOM Software: CAE Learning Space Enterprise con licencia Intuity Versión de imagen: 267r Nivel de parche: 639 Vulnerabilidad: XSS basado en DOM Descripción El software de gestión CAE Learning Space Enterprise es vulnerable a un ataque de XSS basado en DOM. Un ataque d...

CVE-2020-11023

CVE-2020-11023 POC Dom XSS Esta prueba de concepto demuestra una falla de seguridad de XSS basado en DOM manipulando y usando métodos DOM de JQuery. ej:.append, .text,.html Payload que usé: alert"Text: " + $"test".text; Para probar la vulnerabilidad, haz lo siguiente: 1. Abre la consola web de tu...

findom-xss

FinDOM-XSS FinDOM-XSS es una herramienta que te permite encontrar posibles y/o potenciales vulnerabilidades DOM based XSS de manera rápida. Instalación root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencias: LinkFinder Uso Para ejecutar la...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a targe...

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Objetivo:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Versión:V3.5.0 Nombre de la vulnerabilidad:Vulnerabilidad de Cross-Site Scripting XSS basado en DOM en novel V3.5.0 CWE-79 Tipo de vulnerabilidad: Cross-Site Scripting basado en DOM DOM-based XSS Fecha de descubrimiento...

CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute

CVE-2026-25916: Roundcube Webmail DOM XSS Exploit 📋 Exploit Information Exploit Title: Roundcube Webmail DOM XSS via SVG href CVE-2026-25916 Author: Mohammed Idrees Banyamer Contact: GitHub @mbanyamer | Instagram @banyamersecurity Country: Jordan Date: February 9, 2026 CVE: CVE-2026-25916 Type:...

security-advisories

🔐 Avisos de Seguridad por Minhajul Taivin Bienvenido al repositorio oficial de mis divulgaciones CVE publicadas. Este repositorio contiene avisos de seguridad detallados, información de prueba de concepto, estrategias de mitigación y análisis técnico para vulnerabilidades que he descubierto. 📌 CV...

Vulnerabilities in Adobe Experience Manager

Adobe has identified several vulnerabilities in Adobe Experience Manager. Adobe Experience Manager contains several Cross-Site Scripting XSS vulnerabilities, including DOM-based and stored XSS vulnerabilities. These vulnerabilities allow attackers to inject and execute malicious JavaScript code...

CVE-2024-28715

CVE-2024-28715 ID de CVE CVE-2024-28715 PRODUCTO DoraCMS Versión DoraCMS v2.18 y anteriores TIPO DE PROBLEMA XSS basado en DOM. DESCRIPCIÓN Vulnerabilidad de Cross-Site Scripting XSS en DOraCMS v2.18 y anteriores permite a un atacante remoto ejecutar código arbitrario a través de la función...