Lucene search
+L

3604 matches found

Kitploit
Kitploit
•added 2026/09/26 7:51 a.m.•71 views

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 11:04 p.m.•15 views

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

5.4CVSS6.2AI score0.00548EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 8:43 p.m.•6 views

CVE-2020-11023

CVE-2020-11023 POC Dom XSS Esta prueba de concepto demuestra una falla de seguridad de XSS basado en DOM manipulando y usando métodos DOM de JQuery. ej:.append, .text,.html Payload que usé: alert"Text: " + $"test".text; Para probar la vulnerabilidad, haz lo siguiente: 1. Abre la consola web de tu...

6.9CVSS6.8AI score0.84887EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/25 8:21 p.m.•11 views

NoXss

NoXss NoXss is a cross-site script vulnerability scanner supported reflected xss and dom-based xss. It's very fast and suitable for testing millions of urls. It has found some xss vulnerabilities in Bug Bounty program. Features Fast and suitable for testing millions of urls Support Dom-based xssu...

6AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2026/09/25 9:41 a.m.•6 views

WordPress Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored DOM-Based Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin BP Better Messages versions = 3.0.4...

6.4CVSS5.8AI score0.00193EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2026/09/25 8:47 a.m.•13 views

burp-dom-scanner

Burp DOM 扫描器 这是一个 Burp Suite 的扩展,用于对单页应用进行递归爬取和扫描。 它会运行一个 Chromium 浏览器来扫描网页中的基于 DOM 的 XSS。 它还可以收集爬取期间发出的所有请求(XHR、fetch、websocket 等),允许将它们转发到 Burp 的 Proxy、Repeater 和 Intruder。 需要 node 和 DOMDig。 下载 最新版本可以在此下载。 安装 1. 安装 node 2. 安装 DOMDig 3. 下载并加载扩展 4. 在扩展的 UI 中设置 node 可执行文件的路径以及 domdig.js 的路径。 扫描引擎...

5.9AI score
SaveExploits0References2
NVD
NVD
•added 2026/09/25 7:16 a.m.•6 views

CVE-2026-93303

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'formdata' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. Th...

7.2CVSS0.00247EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/25 6:39 a.m.•8 views

EUVD-2026-86549

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via User Display Name in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6AI score0.00193EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/25 6:39 a.m.•16 views

CVE-2026-94376 Better Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Name

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via User Display Name in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00193EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 6:39 a.m.•10 views

CVE-2026-94376

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 3.0.4 . The root cause is insufficient input sanitization and output escaping in the User Display Nam...

6.4CVSS6AI score0.00193EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 6:39 a.m.•8 views

EUVD-2026-86545

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'formdata' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. Th...

7.2CVSS6AI score0.00247EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/25 5:24 a.m.•11 views

CVE-2017-7038

CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability root@kitploit: var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayloa...

6.1CVSS7AI score0.02913EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 4:49 a.m.•17 views

findom-xss

FinDOM-XSS FinDOM-XSS 是一个工具,可以快速查找可能的/潜在的基于DOM的XSS漏洞。 安装 root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules 依赖项: LinkFinder 用法 要在目标上运行该工具,只需使用以下命令。 root@kitploit: $ ./findom-xss.sh https://domain.tld/about-us.html 这将对 domain.tld 运行该工具。...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 4:49 a.m.•83 views

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a targe...

5.5AI score
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•28 views

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

6.9CVSS6AI score0.0116EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 5:59 p.m.•11 views

CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute

CVE-2026-25916: Explotación de XSS DOM en Roundcube Webmail 📋 Información del Exploit Título del Exploit: XSS DOM en Roundcube Webmail mediante href SVG CVE-2026-25916 Autor: Mohammed Idrees Banyamer Contacto: GitHub @mbanyamer | Instagram @banyamersecurity País: Jordania Fecha: 9 de febrero de...

4.3CVSS5.7AI score0.00469EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/24 2:10 p.m.•11 views

CVE-2024-28715

CVE-2024-28715 ID de CVE CVE-2024-28715 PRODUCTO DoraCMS Versión DoraCMS v2.18 y anteriores TIPO DE PROBLEMA XSS basado en DOM. DESCRIPCIÓN Vulnerabilidad de Cross-Site Scripting XSS en DOraCMS v2.18 y anteriores permite a un atacante remoto ejecutar código arbitrario a través de la función...

5.9AI score0.01071EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 1:52 p.m.•6 views

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Objetivo:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Versión:V3.5.0 Nombre de la vulnerabilidad:Vulnerabilidad de Cross-Site Scripting XSS basado en DOM en novel V3.5.0 CWE-79 Tipo de vulnerabilidad: Cross-Site Scripting basado en DOM DOM-based XSS Fecha de descubrimiento...

5.7AI score0.00355EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/23 5:36 p.m.•9 views

security-advisories

🔐 Security Advisories by Minhajul Taivin Welcome to the official repository of my published CVE disclosures. This repository contains detailed security advisories, proof-of-concept information, mitigation strategies, and technical analysis for vulnerabilities I have discovered. 📌 Published CVEs 1️⃣...

6.1AI score0.0036EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/22 9:40 a.m.•17 views

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...

6.1CVSS6.1AI score0.25136EPSS
SaveExploits1References1
Rows per page
Query Builder