Loading video...

Video Failed to Load

Go Home

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

4osp3l's profile picture

Gospel

20,316 subscribers

15,425 views • 3 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss
0:21

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,216 views • 2 years ago

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 views • 9 months ago

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET
0:37

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Lukas Stefanko

55,850 views • 2 years ago

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:
0:37

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,539 views • 3 months ago

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.
18:23

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.

The Lunduke Journal

70,646 views • 7 months ago

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,747 views • 2 years ago

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity
1:13

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 views • 4 months ago

Exploiting people with a pre existing mental condition is not cool.
2:06

Exploiting people with a pre existing mental condition is not cool.

AlphaFox

65,063 views • 3 years ago

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

590,905 views • 3 years ago

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
17:59

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴

44,787 views • 2 years ago

Footage of a player exploiting in the New Time Trials 🤯❌
1:00

Footage of a player exploiting in the New Time Trials 🤯❌

Pet Simulator News

18,796 views • 1 year ago

Date with a Dom 3
0:25

Sensitive content

Date with a Dom 3

OfficialEmpressJennifer

80,015 views • 2 years ago

Dom Kennedy With a Game Saving Home Run Robbery in a Celebrity Softball Game 😂⚾️🔥
0:23

Dom Kennedy With a Game Saving Home Run Robbery in a Celebrity Softball Game 😂⚾️🔥

AuxGod

40,041 views • 1 year ago

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc
0:36

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc

V12

1,161,693 views • 2 months ago

vulnerability is a huge strength
0:28

vulnerability is a huge strength

The Notorious J.O.V.

123,330 views • 1 year ago

exploiting a v8 engine pwn challenge
0:42

exploiting a v8 engine pwn challenge

Ruikai Peng

30,361 views • 1 year ago

A parlay instead of a tip? Exploiting homeless people?
1:02

A parlay instead of a tip? Exploiting homeless people?

Beau Knows

39,719 views • 1 year ago