11236 matches found
CVE-2025-3271
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
reDOM
reDOM root@kitploit: ██████╗ ███████╗██████╗ ██████╗ ███╗ ███╗ ██╔══██╗██╔════╝██╔══██╗██╔═══██╗████╗ ████║ ██████╔╝█████╗ ██║ ██║██║ ██║██╔████╔██║ ██╔══██╗██╔══╝ ██║ ██║██║ ██║██║╚██╔╝██║ ██║ ██║███████╗██████╔╝╚██████╔╝██║ ╚═╝ ██║ ╚═╝ ╚═╝╚══════╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝ Una extensión de Burp...
CVE-2020-11023
CVE-2020-11023 POC Dom XSS Esta prueba de concepto demuestra una falla de seguridad de XSS basado en DOM manipulando y usando métodos DOM de JQuery. ej:.append, .text,.html Payload que usé: alert"Text: " + $"test".text; Para probar la vulnerabilidad, haz lo siguiente: 1. Abre la consola web de tu...
xsssniper
XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...
xsssniper
XSSSNIPER xsssniper es una práctica herramienta de descubrimiento de XSS con funcionalidades de escaneo masivo. Uso: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA...
CVE-2025-55182-React2Shell-Async-Scanner
⚡ React2Shell CVE-2025-55182 / CVE-2025-66478 - Escáner de RCE Asíncrono Envenenamiento de prototipos → Ejecución Remota de Código a través de React Server Actions...
Next.js-RSC-RCE-Scanner-Burp-Suite-Extension
Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...
cve-2025-55182-checker
CVE-2025-55182 Checker A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by CVE-2025-55182. Features Recursively scans all package.json files in a project. Detects vulnerable versions of: react-server-dom- 19.0.0, 19.1.0, 19.1.1, 19.2.0 next...
firefox: thunderbird: Privilege escalation in the DOM: Networking component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...
firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...
firefox: thunderbird: Privilege escalation in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...
-CVE-2025-55182
🔍 GitHub CVE Scanner - Usage Guide Script to scan GitHub repositories for known vulnerabilities in React and Next.js projects. 📋 Detected Vulnerabilities The scanner checks the following CVEs: CVE-2025-55182 : Vulnerability in React Server Components Affects: React 19.0.0, 19.1.0, 19.1.1, 19.2.0...
firefox: thunderbird: Privilege escalation in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...
firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...
firefox: thunderbird: Privilege escalation in the DOM: Networking component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...
firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...
JSFScan.sh
JSFScan.sh Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to...
LLMReaper
Passive LLM Conversation Capture & Sensitive Data Exposure Research Chromium MV3 Extension • Real-Time DOM Capture • Secret Detection • FastAPI Backend !WARNING This project is provided strictly for security research, educational use, and defensive awareness purposes. Unauthorized deployment...