domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

CSPBypass

CSP 우회 CSPBypass.com 에 오신 것을 환영합니다. 이 도구는 특정 화이트리스트 도메인만 허용하는 CSP로 인해 주입injection이 차단된 사이트에서 윤리적 해커가 제한적인 콘텐츠 보안 정책CSP을 우회하고 XSS사이트 간 스크립팅 취약점을 악용할 수 있도록 설계되었습니다. 웹사이트 CSPBypass.com을 방문하여 XSS를 달성할 수 있는 기존 CSP 우회 가젯을 검색하거나 자신의 발견 사항을 기여하세요. 오프라인 사용 번들된 데이터셋과 함께 정적 UI를 제공하기 위해 Docker 이미지를 빌드하고 로컬에서...

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress 사전 인증Pre-Auth XSS → RCE 익스플로잇 체인으로, pwn.ai의 연구를 기반으로 ionsec.io에 게시된 내용입니다. ⚠️ 법적 경고 : 교육 목적 및 승인된 테스트 에만 사용하십시오. 소유한 시스템 또는 테스트에 대한 명시적인 서면 허가를 받은 시스템에 대해서만 사용하세요. 랩 검증 단계| 기법| 상태 ---|---|--- 1| 파서 차등 XSS sanitizeuser + 브라우저 파싱 차이| ✅ 검증됨 2| DOM 클로버링 , | ✅...

CVE-2026-64638-XSS-to-Shell-PoC

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concept PoC tool for validating CVE-2026-64638 , a pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting WordPress installations versions 6.4 – 7.0.2. Overview This tool automates the process of fingerprinting,...

rosettaflash

Rosetta Flash CVE-2014-4671 Windows および OS X 上の Adobe Flash Player 13.0.0.231 より前のバージョンと 14.x の 14.0.0.145 より前のバージョン、Linux 上の 11.2.202.394 より前のバージョン、Android 上の Adobe AIR 14.0.0.137 より前のバージョン、Adobe AIR SDK 14.0.0.137 より前のバージョン、および Adobe AIR SDK & Compiler 14.0.0.137 より前のバージョンは、SWF...

CVE-2015-9251

CVE-2015-9251 [email protected] PoC для CVE-2015-9251 jQuery версий ниже 3.0.0. CVE-2015-9251 - PoC Exploit Этот репозиторий содержит Proof of Concept PoC для уязвимости CVE-2015-9251 в библиотеке jQuery. Уязвимость позволяет атаку Cross-Site Scripting XSS через несанитизированные...

Exploit for CVE-2026-64638

CVE-2026-64638 // XSS2Shell Análisis técnico y matriz de mi...

Exploit for CVE-2026-64638

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...

PYSEC-2026-1718 OMERO.web must check that the JSONP callback is a valid function

Background There is currently no escaping or validation of the callback parameter that can be passed to various OMERO.web endpoints that have JSONP enabled. One such endpoint is /webclient/imgData/.... As we only really use these endpoints with jQuery's own callback name generation ^1 it is quite...

CVE-2026-10585

CVE-2026-10585 describes a stored XSS in GitHub Enterprise Server where an authenticated attacker could execute JavaScript in another user’s browser by injecting a crafted payload into a Discussion title in the Q&A category. The vulnerability stems from the AnsweredQuestionStructuredDataComponent...

CVE-2026-58371

SeaweedFS before 4.30 is vulnerable to cross-origin information disclosure via an unvalidated JSONP callback parameter. The shared writeJson helper can reflect the callback verbatim into responses served as application/javascript without callback-name validation, missing X-Content-Type-Options: n...

CVE-2026-42548

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

CVE-2026-42548

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

CVE-2026-42548 Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

CVE-2026-42548

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

CVE-2026-42548 Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

CVE-2026-42548 Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that...

Flight 跨站脚本漏洞

Flight is a PHP microframework developed by Mike Cao. Versions of Flight prior to 3.18.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from the use of Flight::jsonp, which directly connected the “?jsonp=” query parameter to the application/javascript response body. No...

GHSA-FCX8-PH5R-MXR4 Flight has reflected XSS through an unvalidated JSONP callback in Flight::jsonp()

Summary Flight::jsonp concatenates the ?jsonp= query parameter directly into an application/javascript response body without validating that the value is a legal JavaScript identifier. An attacker can inject arbitrary JavaScript that executes in the response origin, enabling reflected cross-site...