Lucene search
+L

11443 matches found

Kitploit
Kitploit
added 2026/09/13 6:07 p.m.9 views

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Extensión de Burp Suite Una extensión de Burp Suite de alta fidelidad para detectar la vulnerabilidad Ejecución remota de código en Next.js / React Server Components RSC CVE-2025-55182 y CVE-2025-66478. Esta extensión implementa la lógica de detección descubierta por el...

10CVSS7.5AI score0.99802EPSS
SaveExploits405
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.106 views

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash. id: CVE-2021-24891 info: name: WordPress Elementor Website Builder 3.1.4 - Cross-Site Scripting author:...

6.1CVSS6.2AI score0.25136EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.133 views

Ghost CMS <=4.32 - Cross-Site Scripting

Ghost CMS 4.0.0 to 4.3.2 contains a DOM cross-site scripting vulnerability. An unused endpoint added during the development of 4.0.0 allows attackers to gain access by getting logged-in users to click a link containing malicious code. id: CVE-2021-29484 info: name: Ghost CMS =4.32 - Cross-Site...

6.8CVSS6.6AI score0.07935EPSS
SaveExploits1References7
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.112 views

Yonyou U8 13.0 - Cross-Site Scripting

Yonyou U8 13.0 contains a DOM-based cross-site scripting vulnerability via the component /u8sl/WebHelp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...

6.1CVSS6.2AI score0.41722EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.27 views

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

6.9CVSS6AI score0.01083EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 3:36 p.m.9 views

NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 3:28 p.m.5 views

https-nj.gov---CVE-2020-11023

https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...

6.9CVSS6.8AI score0.8383EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/13 2:05 p.m.7 views

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Toma de control de cuenta por CSRF no autenticado en BigTreeCMS v4.4.14 Todos los módulos buscables en el panel de administración de BigTreeCMS v4.4.14 son vulnerables a DOM-XSS reflejado a través de la URI. Las consultas de búsqueda se...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:45 p.m.5 views

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Informe de vulnerabilidad del sitio oficial de Nueva Jersey Posible vulnerabilidad XSS en jQuery.htmlPrefilter y métodos relacionados. Pasar HTML desde fuentes no confiables, incluso después de sanitizarlo, a uno de los métodos de manipulación del DOM de jQuery por...

6.9CVSS6.9AI score0.99019EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 12:26 p.m.11 views

react

Volcado de datos de los internals de React Esta herramienta es un userscript rápido y sencillo para Tampermonkey que profundiza un par de niveles en cualquier página de React y busca una o más frases proporcionadas por el usuario. La herramienta facilita encontrar el lugar correcto en el DOM dond...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:01 p.m.10 views

PoC-CVE-2024-24035

CVE-2024-24035 Título The SIL 3.1 es vulnerable a Cross Site Scripting XSS en el parámetro "hmessage". Fecha: 2024-01-14 Autor: Elizeu Das Dores Página del proveedor: https://www.setorinformatica.com/ Versión: 3.1 POC CVE-2024-24035 El parámetro "hmessage" es vulnerable a DOM Based Cross Site...

6.1CVSS5.8AI score0.00443EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 10:49 a.m.5 views

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 10:48 a.m.7 views

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Vulnerabilidad XSS en la implementación de document root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new...

6.1CVSS6.9AI score0.02913EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 10:06 a.m.4 views

htcap

HTCAP htcap es un escáner de aplicaciones web capaz de rastrear aplicaciones de una sola página SPA de forma recursiva interceptando llamadas ajax y cambios en el DOM. CARACTERÍSTICAS PRINCIPALES Motor de rastreo DOM recursivo Descubre solicitudes ajax/fetch/jsonp/websocket Soporta cookies, proxy...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:03 a.m.8 views

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 9:24 a.m.9 views

burp-dom-scanner

Burp DOM Scanner Es una extensión de Burp Suite que permite el rastreo recursivo y el escaneo de Aplicaciones de Página Única. Ejecuta un navegador Chromium para escanear la página web en busca de XSS basado en DOM. También puede recopilar todas las solicitudes XHR, fetch, websockets, etc. emitid...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 9:21 a.m.9 views

CVE-2021-24891-Simulation

Un entorno de laboratorio práctico y contenerizado para simular y explotar una vulnerabilidad de Cross-Site Scripting XSS basado en DOM en el plugin Elementor Website Builder para WordPress, identificada como CVE-2021-24891. 📖 Acerca de la vulnerabilidad Este laboratorio demuestra una...

6.1CVSS6.3AI score0.25136EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 9:07 a.m.7 views

xsssniper

XSSSNIPER xsssniper es una práctica herramienta de descubrimiento de XSS con funcionalidades de escaneo masivo. Uso: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:28 a.m.5 views

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 Acerca de la Vulnerabilidad React2Shell es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta: Target| Versión Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1,...

10CVSS7.5AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
added 2026/09/13 8:21 a.m.11 views

Mimic

Mimic Frameless Browser‑in‑the‑Browser BitB - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy. ⚠️ Warning : Only use this software according to your current legislation. Misuse of this...

5.8AI score
SaveExploits0References7
Rows per page
Query Builder