Loading video...

Video Failed to Load

Go Home

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

4osp3l's profile picture

Gospel

20,116 subscribers

15,055 views • 1 month ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:
0:51

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

45,999 views • 2 months ago

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:
0:22

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

Dark Web Informer

23,493 views • 4 months ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

93,653 views • 2 months ago

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 views • 8 months ago

🚨CVE-2025-26529: Moodle XSS to RCE Exploit Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
3:48

🚨CVE-2025-26529: Moodle XSS to RCE Exploit Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.

Dark Web Informer

22,929 views • 5 months ago

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET
0:37

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Lukas Stefanko

55,814 views • 1 year ago

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:
0:37

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,539 views • 1 month ago

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam
0:56

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

HackGit

39,726 views • 3 years ago

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.
18:23

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.

The Lunduke Journal

70,616 views • 6 months ago

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity
1:13

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 views • 3 months ago

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability
1:47

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability

Mobile Hacker

143,609 views • 2 years ago

Exploiting people with a pre existing mental condition is not cool.
2:06

Exploiting people with a pre existing mental condition is not cool.

AlphaFox

65,063 views • 3 years ago

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,652 views • 2 years ago

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

590,742 views • 3 years ago

A man made millions by exploiting a loophole in a bank's system.🎥🍿🎥
5:34

A man made millions by exploiting a loophole in a bank's system.🎥🍿🎥

WickedMonsterX

23,622 views • 5 days ago

A man tearfully celebrated fatherhood outside a hospital, touching hearts with his raw, emotional vulnerability.🥺❤️
0:32

A man tearfully celebrated fatherhood outside a hospital, touching hearts with his raw, emotional vulnerability.🥺❤️

𝙉𝙞𝙩𝙞𝙨𝙝 𝕏

30,104 views • 1 year ago

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
17:59

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴

44,787 views • 2 years ago

60 XSS in 60 seconds full video on yt soon..
2:20

60 XSS in 60 seconds full video on yt soon..

Coffin

42,910 views • 1 year ago

Footage of a player exploiting in the New Time Trials 🤯❌
1:00

Footage of a player exploiting in the New Time Trials 🤯❌

Pet Simulator News

18,793 views • 1 year ago