I am a researcher looking for some proof-of-concept JavaScript vulnerabilities like XSS that exists in some website or JavaScript libraries in the past. Are there any compilations of them?

  • 1
    There are many lists on the internet about vulnerabilites in the web. One example is wpvulndb.com with thousands of vulnerabilites in Wordpress + Plugins. – Lukas May 9 '16 at 9:54
  • @Lukas Thanks Lukas, that is very useful, let me know if you have more of them. – william007 May 9 '16 at 9:57
  • 1
    cvedetails is another site. But really, you can just google it. "cve xss" or "xss poc" (maybe + some well known software) should give you plenty of results. – tim May 9 '16 at 10:02
  • 1
    You've tagged your question with CVE, so you should know enough to find more on your own ;-) Just find any public CVE list and use the search function of the site to get as many XSS, SQLI, CSRF ... vulnerabilities as you like. One example with > 10.000 results: cve.mitre.org/cgi-bin/cvekey.cgi?keyword=XSS – Lukas May 9 '16 at 10:03
  • @Lukas Thanks Lukas, thanks for the great suggestion! I was thinking keyword like "javascript", "browsers", yours are definitely more direct! – william007 May 9 '16 at 10:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.