freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

AwesomeXSS

AwesomeXSS Este repositorio es una colección de recursos Awesome XSS. Las contribuciones son bienvenidas y deben enviarse mediante un issue. Awesome contents Desafíos Lecturas y Presentaciones Herramientas Mapas mentales DOM XSS Payloads Poliglotas Etiquetas y manejadores de eventos Ruptura de...

CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day

Informe de vulnerabilidad XSS 0-Click / 0-Day Cross-Site Scripting 0-Click que conduce al abuso del puente JavaScript en Pocket Android e iOS — CVSS 9.2 CRÍTICO CVE-2026-82090 — Publicado por MITRE Corporation 2026-08-28 Autor: Ing. Zampier Zago FUNFACTOR1 División: Sección 1 — Departamento de...

JSFScan.sh

JSFScan.sh 博客地址位于 https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 该脚本用于漏洞赏金中的JavaScript侦察自动化。只需传入子域名列表并根据偏好设置选项即可。 功能特性 root@kitploit: 1 - Gather Jsfile Links from different sources. 2 - Import File...

domdig

DOMDig DOMDig 是一个运行在 Chromium 浏览器内部的 DOM XSS 扫描器，可以递归地扫描单页应用（SPA）。 与其他扫描器不同，DOMDig 通过跟踪 DOM 修改和 XHR/fetch/websocket 请求来爬取任何 Web 应用（包括 Gmail），并通过触发事件来模拟真实用户交互。在此过程中，输入字段中会注入 XSS 载荷，并跟踪其执行情况，以发现注入点及相关的 URL 变更。 它基于 htcrawl 构建，这是一个功能强大的 Node 库，足以轻松爬取 Gmail 账户。 主要特性 在真实浏览器（Chromium）内运行 递归 DOM 爬取引擎 处理...

xsssniper

XSSSNIPER xsssniper 是一个方便的 XSS 发现工具，具有批量扫描功能。 使用方法： root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS number of threads...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver BigTreeCMS v4.4.14 中未经身份验证的 CSRF 账户接管 BigTreeCMS v4.4.14 管理面板中所有可搜索模块均存在通过 URI 触发的反射型 DOM-XSS 漏洞。搜索查询在页面中未经适当清理即被反射，导致任意 JavaScript 执行。CSRF 令牌也存储在所有页面上易于调用的变量中，使得未经身份验证的攻击者能够通过点击劫持以管理员或开发者身份伪造请求。 DOM-XSS URI:...

CVE-2020-13889

作者：Andre k Lorenci 联系方式：[email protected] CVE-2020-13889 你好，此漏洞存在于 bludit 后台管理面板中的一个名为 showAlert 的函数中。当在 DOM 中调用该函数时，允许用户定义要在消息框中弹出的文本。但该函数没有任何过滤机制，用户可以在页面中注入任意 JavaScript 代码甚至 HTML。 为了演示该函数的返回值，我使用了 Web 开发工具包，将一个 XSS 代码作为该函数的参数传入。 使用的 payload 为： showAlert"alert1"; 我测试的版本是 Bludit 3.x。 谢谢。...

CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based cross-site scripting XSS vulnerability in the component runtime. When a downstream application enables the experimental slot fixes option and uses scoped components, assigning a string to the textContent property of such a component's host element causes t...

CVE-2026-94373

MISP contains a DOM-based cross-site scripting XSS vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML elements by assigning user-controllable values to the innerHTML property. Because innerHTML parses and renders HTML markup, any untrusted string...

CVE-2026-94373 MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

MISP contains a DOM-based cross-site scripting XSS vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML elements by assigning user-controllable values to the innerHTML property. Because innerHTML parses and renders HTML markup, any untrusted string...

CVE-2026-94373 MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

MISP contains a DOM-based cross-site scripting XSS vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML elements by assigning user-controllable values to the innerHTML property. Because innerHTML parses and renders HTML markup, any untrusted string...

EUVD-2026-83903

MISP contains a DOM-based cross-site scripting XSS vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML elements by assigning user-controllable values to the innerHTML property. Because innerHTML parses and renders HTML markup, any untrusted string...

CVE-2026-94373

MISP (versions prior to 2.5.47 ) is affected by a DOM-based cross-site scripting (XSS) vulnerability in the ContextualMenu JavaScript component. The root cause is the assignment of user-controllable values to the innerHTML property of elements, causing untrusted strings to be parsed as live DOM ...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI 在启用“以富文本方式插入提示”时，存在通过提示触发的存储型 DOM XSS 漏洞，可导致账户接管（ATO）或远程代码执行（RCE） 摘要 当“以富文本方式插入提示”功能启用时，将自定义提示插入聊天窗口的功能容易受到 DOM XSS 攻击，因为提示内容被直接赋值给 DOM sink .innerHtml 而未经过净化。任何拥有创建提示权限的用户都可以利用此漏洞植入载荷，其他用户如果执行对应的 / 命令来插入该提示，就会触发该载荷。 详情 受影响的代码行位于：...

CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based XSS vulnerability in its component runtime . When a downstream application enables the experimental slot fixes option and uses scoped components , assigning a string to the textContent property of a component's host element causes the value to be parsed as...

NPM: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

NPM: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer vulnerability discovered by ? in WordPress Npm msdoc-viewer versions = 0.2.1...

GHSA-3753-M2X2-Q623 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

Summary Before 2.3.1, the legacy .doc renderer emitted document hyperlink targets after HTML escaping but without a URL-scheme allowlist. A crafted .doc could therefore render a live javascript:, vbscript:, data:, or similarly unsafe link. Script could execute in the embedding origin if a viewer...

File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

Summary Before 2.3.1, the legacy .doc renderer emitted document hyperlink targets after HTML escaping but without a URL-scheme allowlist. A crafted .doc could therefore render a live javascript:, vbscript:, data:, or similarly unsafe link. Script could execute in the embedding origin if a viewer...