7550 matches found
whonow
Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...
nosurf-cve-2025-46721
CVE-2025-46721: CSRF due to non-functional same-origin checks in justinas/nosurf What happened? Am I affected? PoC Patching Acknowledgements What happened? All versions of nosurf before 1.2.0 failed to apply same-origin checks for incoming requests. This happened due to relying on the .URL.Scheme...
WebKit-NavigationAPI-SOP-Bypass
WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — Same-Origin Policy bypass via cross-port interception CVE-2026-20643...
webrtc-ips
STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...
dref
DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...
CVE-2026-43700
CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...
whonow
Whonow DNS सर्वर एक दुर्भावनापूर्ण DNS सर्वर जो चलते-फिरते DNS रीबाइंडिंग हमले को अंजाम देने के लिए है। whonow आपको DNS प्रतिक्रियाएँ और रीबाइंड नियमों को डोमेन अनुरोधों के माध्यम से गतिशील रूप से निर्दिष्ट करने देता है। root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the...
CVE-2017-17692
CVE-2017-17692 Exploit Title: SOP Bypass Date: 06 सितम्बर 2017 Software Link: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ श्रेणी: ब्राउज़र वीडियो PoC:...
singularity
Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...
flash-xdomain-xploit
Author: Gursev Singh Kalra [email protected] Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml Compiling and deploying the Proof of Concept ActionScript code 1. Download and install Apache Flex SDK. It comes with an ActionScript compiler. 2. Copy the ActionScript code to...
flash-xdomain-xploit
Author: Gursev Singh Kalra [email protected] Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml Compiling and deploying the Proof of Concept ActionScript code 1. Download and install Apache Flex SDK. It comes with an ActionScript compiler. 2. Copy the ActionScript code to...
CVE-2026-43735
CVE-2026-43735 WebKit cross-origin information leak. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Principle When the parent page uses to trigger a fragment navigation of a cross-origin iframe, the NavigateEvent.sourceElement received by the iframe is the element of the parent page...
LavaDome
LavaDome 🌋️ أداة جديدة منLavaMoat لتغليف عُقد DOM بشكل آمن ⚠️ تجريبي WIP - الاستخدام على مسؤوليتك الخاصة اعرف المزيد العرض التجريبي جرّب حظك معLavaDome - قم بزيارة التطبيق التجريبي، افتح وحدة التحكم، وافعل ما بوسعك لسرقة السر من داخل مثيل LavaDome أبلغ عن نجاحك معاينة انقر للتوسيع الدافع في ظل...
CVE-2026-12295-UXXS-in-my-wasm
CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefox UXSS Proof of concept: a compromised content process forges a PDocumentChannel load whose nsDocShellLoadState carries SrcdocData together with an arbitrary URI. Vulnerable builds serve the attacker HTML as the document at the victim...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...
PHP-CGI-INTERNAL-RCE
PHP-CGI-आंतरिक-RCE यह PoC दर्शाता है कि कैसे एक हमलावर Orange Tsai के CVE-2024-4577 को DNS रीबाइंडिंग के साथ जोड़कर सीधे पीड़ित के वेब ब्राउज़र के माध्यम से आंतरिक नेटवर्क बुनियादी ढांचे पर रिमोट कोड निष्पादन प्राप्त कर सकता है। समान-मूल नीति SOP को दरकिनार करके और स्थानीय XAMPP सर्वर, आंतरिक विक...
OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...
CVE-2026-55696
PrivateBin versions prior to 2.0.5 contain a stored XSS vulnerability in the attachment download link. The root cause is that DOMPurify sanitization in AttachmentViewer.setAttachment only applies to image/*svg MIME types, and the resulting sanitized blob is assigned to a local variable used for t...
CVE-2026-72702 Grav CMS before 2.0.16 Origin Validation Bypass via Referer
Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer and Pages::referrerRoute methods, which validate the Referer header using an unanchored string prefix match strstartswith$referrer, $base with no trailing delimiter. An attacker who controls a domain that begins with...
