JSFScan.sh

JSFScan.sh El blog se puede encontrar en https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script creado para toda tu automatización de reconocimiento de JavaScript en bug bounty. Simplemente pasa la lista...

xsssniper

XSSSNIPER xsssniper es una práctica herramienta de descubrimiento de XSS con funcionalidades de escaneo masivo. Uso: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA...

CVE-2020-13889

Autor: Andre k Lorenci Contacto: [email protected] CVE-2020-13889 Hola, esta vulnerabilidad consiste en una función llamada showAlert en el panel de administración de bludit que, al ser invocada desde el DOM, permite a los usuarios definir el texto que se mostrará en el cuadro de mensaje. Pe...

advisories

关于我 Twitter：@justinsteven 博客：https://www.justinsteven.com/ 安全通告 按时间倒序列出。点击任意标题即可阅读完整通告。 Gartner Peer Insights Widget postMessage DOM XSS 披露日期：2023-02-03 Gartner Peer Insights Widget 存在一个 DOM XSS 漏洞，可通过来自任何主机名包含 "gartner.com" 的站点（例如 https://gartner.com.attacker.com）发送的 postMessage 消息触发。这影响了 Black...

domdig

DOMDig DOMDig 是一个运行在 Chromium 浏览器内部的 DOM XSS 扫描器，可以递归地扫描单页应用（SPA）。 与其他扫描器不同，DOMDig 通过跟踪 DOM 修改和 XHR/fetch/websocket 请求来爬取任何 Web 应用（包括 Gmail），并通过触发事件来模拟真实用户交互。在此过程中，输入字段中会注入 XSS 载荷，并跟踪其执行情况，以发现注入点及相关的 URL 变更。 它基于 htcrawl 构建，这是一个功能强大的 Node 库，足以轻松爬取 Gmail 账户。 主要特性 在真实浏览器（Chromium）内运行 递归 DOM 爬取引擎 处理...

AwesomeXSS

AwesomeXSS 这个仓库收集了各种 Awesome XSS 资源。欢迎贡献，请通过 issue 提交。 精彩内容 挑战 阅读与演讲 工具 思维导图 DOM XSS Payload Polyglot 标签与事件处理器 上下文突破 HTML 上下文 属性上下文 JavaScript 上下文 Confirm 变体 漏洞利用 探测 绕过 编码 技巧与诀窍 精彩挑战 prompt.ml alf.nu/alert1 xss-game.appspot.com polyglot.innerht.ml sudo.co.il/xss root-me.org chefsecure.com...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver BigTreeCMS v4.4.14 中未经身份验证的 CSRF 账户接管 BigTreeCMS v4.4.14 管理面板中所有可搜索模块均存在通过 URI 触发的反射型 DOM-XSS 漏洞。搜索查询在页面中未经适当清理即被反射，导致任意 JavaScript 执行。CSRF 令牌也存储在所有页面上易于调用的变量中，使得未经身份验证的攻击者能够通过点击劫持以管理员或开发者身份伪造请求。 DOM-XSS URI:...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI معرض لـ DOM XSS المخزنة عبر المطالبات عند تمكين 'إدراج المطالبة كنص منسق' مما يؤدي إلى ATO/RCE الملخص الوظيفة التي تُدرج المطالبات المخصصة في نافذة المحادثة معرضة لـ DOM XSS عند تمكين 'إدراج المطالبة كنص منسق'، حيث يتم تعيين نص المطالبة إلى موصل DOM .innerHtml دون...

CVE-2026-55566

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin...

Yamcs has DOM XSS in Extension Routing

Attack type: Unauthenticated remote Impact: Execution of arbitrary JavaScript in a user’s browser. Affected components: extension.matcher.ts:12, extension.component.ts:40, app.component.ts:134. Yamcs is vulnerable to cross-site scripting in the /ext URL endpoint. By inputting specially crafted co...

EUVD-2026-67845

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin...

CVE-2026-55566 Yamcs: DOM XSS in Extension Routing

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin...

CVE-2026-55566 Yamcs: DOM XSS in Extension Routing

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin...

CVE-2026-55566

Yamcs , a mission control framework, is affected by a DOM XSS in the /ext URL route (affected versions prior to 5.12.8 and 5.13.2 ). The root cause is that attacker-controlled data in files extension.matcher.ts, extension.component.ts, and app.component.ts is rendered via innerHTML without valida...

jsprime

Autori Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduzione Oggi, sempre più sviluppatori stanno passando a JavaScript come prima scelta di linguaggio. Il motivo è semplice: JavaScript è stato ormai accettato come linguaggio di programmazione principale per le...

CVE-2026-66155

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-66155

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-66155

Siemens Element maps-ng (V47, V48, V49) is affected by an XSS vulnerability in the si-map component. The root cause is improper neutralization of user-controllable input in the points property, which is used to render the tooltip label of map pins . An attacker can craft a malicious URL that, whe...

SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed

Summary A DOM-based Cross-Site Scripting XSS vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed HTML followed by an external element bypasses the plugin’s sanitization logic. The plugin recreates and appends the attacker-controlled script element to the live DOM, causing...