CSPBypass

CSP Bypass CSPBypass.com へようこそ。このツールは、許可された特定のドメインのみを許可するCSPによってインジェクションがブロックされているサイトで、制限的なコンテンツセキュリティポリシー（CSP）をバイパスし、XSS（クロスサイトスクリプティング）脆弱性を悪用するための倫理的ハッカーを支援するために設計されています。 Website CSPBypass.com にアクセスして、XSSを可能にする既存のCSPバイパスガジェットを検索したり、独自の発見を貢献したりしてください。 Offline Usage...

EUVD-2025-26672

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

cspparse

cspparse 설명 cspparse는 Content Security Policy를 평가하는 도구입니다. Google의 API를 사용하여 CSP 헤더를 가져와 ReconJSON 형식으로 반환합니다. Google의 API로 헤더를 확인할 뿐만 아니라, 대상 사이트의 HTML을 파싱하여 태그에 지정된 CSP 규칙을 찾습니다. 설치 Go Get으로 명령어 설치 및 소스 다운로드 cspparse 명령어가 $GOPATH/bin에 설치되고, 소스 코드https://github.com/lc/cspparse는...

CVE-2026-67421 RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

JSONBee

JSONBee 다양한 웹사이트의 콘텐츠 보안 정책을 우회하는 데 도움이 되는 바로 사용 가능한 JSONP 엔드포인트입니다. 이 도구는 키예프에서 열린 HackIT 2018에서 발표되었습니다. 발표 자료는 여기에서 찾을 수 있습니다슬라이드 형식이 왜 망가졌는지 모르겠네요 :D: https://www.slideshare.net/HackenEcosystem/ebrahem-hegazy-bug-hunters-manual-for-bypassing-contentsecuritypolicy JSONBee란 무엇인가? 이 도구의 주요 아이디어는...

CVE-2026-91122

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the video placeholder component allowed crafted HTML to cause an attribute breakout and inject an attacker-controlled event handler. An authenticated user with default trust-level posting...

CVE-2020-6519

これは元々、PerimeterX社の公式Github から、私の仕事用Githubアカウント を通じて公開されました。 これは私の仕事ではありますが、すべての権利および法的な問題はPerimeterX社に帰属します。 Chromium 83 ゼロデイ 完全CSPバイパス クロスプラットフォーム CVE-2020-6519 Exploit DB 技術記事 （ 済み）...

CVE-2020-6519

Chromium 83 ゼロデイ 完全CSPバイパス クロスプラットフォーム CVE-2020-6519 技術記事 POC 報告済み Chromiumプロジェクトへ デモ動画...

CVE-2026-77912 Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

CVE-2026-54477

CVE-2026-54477: 管理パネルのセキュリティヘッダー欠落（クリックジャッキング / XSS） アドバイザリ 項目| 値 ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 中 ベクター 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N ベクター 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CWE CISA 割当| CWE-644...

zappzarapp-php-security

⚡ zappzarapp/security CSP、セキュリティヘッダー、CSRF保護、セキュアクッキー、パスワード検証、入力サニタイズ、レート制限、SRI、シークレット読み込み、暗号化、セッションセキュリティ、TOTP二要素認証、署名付きURL、セキュリティイベントログを提供する包括的なPHPセキュリティライブラリです。 主な特長 オールインワン — 単一の構成可能なパッケージに17のセキュリティモジュール デフォルトでセキュア — 厳格なCSP、unsafe-なし、HTTPS優先 フレームワーク非依存 — 任意のPHP 8.4+アプリケーションで動作 イミュータブル＆型安全 —...

OESA-2026-3955 python-jupyter-server security update

The backend for Jupyter web applications Security Fixes: The nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a...

CVE-2026-55630

Kiwi TCMS versions prior to 16.1 are vulnerable to stored XSS through the TestCase.extra_link and TestPlan.extra_link fields, which accepted unsanitized user input and rendered it verbatim, allowing injection of a javascript: URI. In default deployments using official Docker images or unmodified ...

EUVD-2026-78674

Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extralink and TestPlan.extralink accepted unsanitized user input and rendered stored values verbatim, creating an opportunity for cross-site scripting. Official Docker images and unmodified Kiwi TCMS middleware send a...

CVE-2026-55630: Improper Neutralization of Input During Web Page Generation

Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extralink and TestPlan.extralink accepted unsanitized user input and rendered stored values verbatim, creating an opportunity for cross-site scripting. Official Docker images and unmodified Kiwi TCMS middleware send a...

ROS-20260915-73-0094

The vulnerability of the Content Security Policy component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially crafted HTML page...

Astra Linux – Vulnerability in WebKit2GTK

An issue related to information leakage has been addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1, and iPadOS 14.8.1, tvOS 15.1, and watchOS 8.1. A malicious website that uses Content Security Policy reporting may be able to leak information through...

Astra Linux – Vulnerability in Chromium

In ServiceWorkers of Google Chrome prior to version 147.0.7727.55, bypassing the content security policy was possible when a remote attacker used a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Dev Tools of Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy through a crafted HTML page...