Lucene search
+L

6163 matches found

Kitploit
Kitploit
added 2026/09/05 5:10 p.m.5 views

CVE-2017-17692

CVE-2017-17692 Exploit Title: SOP Bypass Date: 06 Septmber 2017 Software Link: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ Category: Browser Video PoC:...

7.5CVSS7.6AI score0.78843EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/05 4:43 p.m.85 views

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

6.7AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/05 2:07 p.m.5 views

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass واجهة برمجة تطبيقات التنقل في WebKit — تجاوز سياسة نفس الأصل عبر اعتراض عبر المنافذ CVE-2026-20643...

5.4CVSS6.8AI score0.00354EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/05 1:21 p.m.11 views

dref

DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/04 10:44 p.m.32 views

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 10:44 p.m.10 views

whonow

Whonow DNS सर्वर एक दुर्भावनापूर्ण DNS सर्वर जो चलते-फिरते DNS रीबाइंडिंग हमले को अंजाम देने के लिए है। whonow आपको DNS प्रतिक्रियाएँ और रीबाइंड नियमों को डोमेन अनुरोधों के माध्यम से गतिशील रूप से निर्दिष्ट करने देता है। root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 4:52 p.m.8 views

flash-xdomain-xploit

Auteur : Gursev Singh Kalra [email protected] Contourner la Same Origin Policy avec Flash et un crossdomain.xml non sécurisé Compilation et déploiement du code ActionScript du Proof of Concept 1. Téléchargez et installez le SDK Apache Flex. Il est livré avec un compilateur ActionScript. 2...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 4:52 p.m.6 views

flash-xdomain-xploit

المؤلف: جورسيف سينغ كالرا [email protected] تجاوز سياسة نفس الأصل Same Origin Policy باستخدام Flash وملف crossdomain.xml غير الآمن تجميع ونشر كود الإثبات Proof of Concept المكتوب بلغة ActionScript 1. قم بتحميل وتثبيت Apache Flex SDK. يأتي مع مُجمِّع لغة ActionScript. 2. انسخ كود ActionScript...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 11:18 a.m.4 views

CVE-2026-43735

CVE-2026-43735 WebKit cross-origin information leak. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Principle When the parent page uses to trigger a fragment navigation of a cross-origin iframe, the NavigateEvent.sourceElement received by the iframe is the element of the parent page...

8.1CVSS5.2AI score0.00332EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 5:20 a.m.40 views

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 2:24 a.m.5 views

PHP-CGI-INTERNAL-RCE

PHP-CGI-आंतरिक-RCE यह PoC दर्शाता है कि कैसे एक हमलावर Orange Tsai के CVE-2024-4577 को DNS रीबाइंडिंग के साथ जोड़कर सीधे पीड़ित के वेब ब्राउज़र के माध्यम से आंतरिक नेटवर्क बुनियादी ढांचे पर रिमोट कोड निष्पादन प्राप्त कर सकता है। समान-मूल नीति SOP को दरकिनार करके और स्थानीय XAMPP सर्वर, आंतरिक विक...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68References1
RedHat Linux
RedHat Linux
added 2026/08/24 10:24 a.m.15 views

firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

5.4CVSS5.2AI score0.00124EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 10:24 a.m.11 views

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

5.4CVSS5.2AI score0.00124EPSS
SaveExploits0References6
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.13 views

Astra Linux - Vulnerability in webkit2gtk

This issue was addressed through improved state management. This issue has been fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Processing maliciously crafted web content may bypass the Same-Origin Policy...

5.5CVSS6.3AI score0.00202EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Firefox

A malicious extension with the “search” permission could have installed a new search engine, and the favicon of this engine referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing it to bypass the same-origin policy—even though the...

6.5CVSS6.9AI score0.00436EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been addressed through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2, and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may allow bypass of the...

5.5CVSS6.7AI score0.00197EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, and watchOS 9.6. A website may be able to bypass the Same Origin Policy...

7.5CVSS6.8AI score0.01168EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page...

8.8CVSS6.9AI score0.00805EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Firefox and Thunderbird

A violation of the same-origin policy could have allowed the theft of cross-origin URL entries, leading to the leakage of the results of a redirect, through the use of performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.1CVSS7.1AI score0.00414EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/24 9:48 a.m.13 views

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

5.4CVSS5.2AI score0.00135EPSS
SaveExploits0References6
Rows per page
Query Builder