burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

burp-dom-scanner

ماسح DOM الخاص بـ Burp إنها إضافة لـ Burp Suite تتيح الزحف والمسح التكراري لتطبيقات الصفحة الواحدة. تقوم بتشغيل متصفح Chromium لمسح صفحة الويب بحثًا عن XSS القائم على DOM. يمكنها أيضًا جمع جميع الطلبات XHR، fetch، websockets، إلخ الصادرة أثناء الزحف مما يسمح بإعادة توجيهها إلى Proxy وRepeater...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a target, just use the...

findom-xss

FinDOM-XSS FinDOM-XSS هي أداة تسمح لك بالعثور على ثغرات XSS المحتملة والمبنية على DOM بطريقة سريعة. التثبيت $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules التبعيات: LinkFinder الاستخدام لتشغيل الأداة على هدف، استخدم الأمر التالي فقط. $ ./findom-xss.sh...

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

PoC-CVE-2024-24035

CVE-2024-24035 Titre : Le SIL 3.1 est vulnérable à un script intersites XSS dans le paramètre « hmessage ». Date : 2024-01-14 Auteur : Elizeu Das Dores Page d'accueil du fournisseur : https://www.setorinformatica.com/ Version : 3.1 POC CVE-2024-24035 Le paramètre « hmessage » est vulnérable à un...

NoXss

NoXss NoXss هو أداة مسح ضوئي لثغرات البرمجة النصية عبر المواقع XSS تدعم الثغرات المنعكسة Reflected XSS والقائمة على DOM DOM-based XSS. إنه سريع جداً ومناسب لاختبار ملايين عناوين URL. لقد اكتشف بعض ثغرات XSS في برامج مكافآت Bugs Bounty. الميزات سريع ومناسب لاختبار ملايين عناوين URL يدعم ثغرات...

CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute

CVE-2026-25916 : Exploit XSS DOM dans Roundcube Webmail 📋 Informations sur l'exploit Titre de l'exploit : XSS DOM dans Roundcube Webmail via href SVG CVE-2026-25916 Auteur : Mohammed Idrees Banyamer Contact : GitHub @mbanyamer | Instagram @banyamersecurity Pays : Jordanie Date : 9 février 2026 CV...

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Vulnérabilité XSS dans l'implémentation Document var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload,...

CVE-2024-28715

CVE-2024-28715 ID CVE CVE-2024-28715 PRODUIT DoraCMS Version DoraCMS v2.18 et antérieur TYPE DE PROBLÈME XSS basé sur le DOM. DESCRIPTION Vulnérabilité de Cross Site Scripting dans DOraCMS v.2.18 et antérieur permet à un attaquant distant d'exécuter du code arbitraire via la fonction markdown0 da...

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Cible:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Version:V3.5.0 Nom de la vulnérabilité:Vulnérabilité de Cross-Site Scripting XSS basé sur le DOM dans novel V3.5.0 CWE-79 Type de vulnérabilité: Cross-Site Scripting basé sur le DOM XSS basé sur le DOM Date de découverte:...

security-advisories

🔐 Avis de sécurité par Minhajul Taivin Bienvenue dans le dépôt officiel de mes divulgations de CVE publiées. Ce dépôt contient des avis de sécurité détaillés, des informations de preuve de concept, des stratégies d'atténuation et des analyses techniques pour les vulnérabilités que j'ai découverte...

CVE-2026-79816

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

CVE-2026-106033

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

CVE-2026-79816 Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

CVE-2026-79816

A DOM-based cross-site scripting (XSS) vulnerability exists in the client interface of HPE Networking ClearPass Policy Manager . This flaw allows an unauthenticated remote attacker to execute arbitrary script code within a victim's browser context while using the affected client interface. No spe...

EUVD-2026-93902

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

CVE-2026-79816 Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

EUVD-2026-93781

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

CVE-2026-106033

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...