🎯 Cross-site scripting

The items that name it 31

• Do the math: How we took over ChatGPT accounts
  writeupas techniques2026-10-31It is written here as XSS.

  Raw HTML in MathLive keyboard layouts and an unsandboxed srcdoc iframe gave JavaScript execution as chatgpt.com.

• Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
  articleas techniques2026-10-29It is written here as Cross-site scripting (XSS) (Adobe Campaign Classic).

  XSS

• Part 3 – Cybersecurity journeys: The work behind the work
  articleas classification.key entities2026-10-27
• What Is SAST? Static Analysis in the Age of AI-Generated Code | Endor Labs
  articleas classification.key entities2026-10-12
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas techniques2026-10-08It is written here as XSS (Cross-Site Scripting).

  Used by the actors as part of their exploitation toolkit

• SonicWall and Splunk Patch Critical Vulnerabilities
  articleas techniques2026-10-08It is written here as Cross-site scripting (XSS).

  enabled by a medium-severity SonicWall SMA1000 vulnerability

• Top AI agent security resources — October 2026
  articleas techniques2026-10-04It is written here as Cross-site scripting (XSS).

  Probed against an Australian government health website

• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas techniques2026-09-24It is written here as Cross-site scripting (XSS).

  Fires in a victim's browser in the desync worm, which then hits the next victim

• AI Agent Hacking Writeups
  repoas techniques2026-09-17It is written here as XSS (Cross-Site Scripting, incl. via javascript: URI, second-order).

  Cross-Site Scripting, incl. via javascript: URI, second-order

• Is prevention essentially a solved problem?
  articleas techniques2026-09-10

  Named as a predictable/named-in-advance risk class

• SAST for AI-Generated Code: What Static Analysis Catches and Misses | Blog | Endor Labs
  articleas techniques2026-09-02It is written here as Cross-site scripting (XSS).

  Flaw in web output produced by AI-generated code

• Prompt Patterns That Make Coding Agents Write Safer Code | Blog | Endor Labs
  articleas techniques2026-09-02

  CWE-79, an injection flaw from unvalidated input, cited as a common AI-generated code weakness

• Awesome Cybersecurity Agentic AI
  repoas techniques2026-08-31It is written here as XSS.
• 91 Vulnerabilities Patched in Spring Application Framework
  articleas techniques2026-08-24It is written here as Cross-site scripting (XSS).

  One of the exploitation methods enabled by the high-severity vulnerabilities.

• Cybermes
  repoas techniques2026-08-23It is written here as XSS.

  Referenced as part of web vulnerability playbooks

• Deep Eye
  repoas techniques2026-08-22It is written here as XSS.

  Vulnerability check performed by the scanner

• Teycir/BurpAPISecuritySuite
  repoas techniques2026-08-21It is written here as XSS (Cross-Site Scripting).

  Reflected parameter exploitation, context breaking, polyglot payloads, event handlers, template injection

• Static Analysis Tools & Linters
  repoas techniques2026-08-09It is written here as Cross-site scripting (XSS).

  XSS

• Dark-Moon
  repoas techniques2026-08-05It is written here as Cross-site scripting (xss).

  Focus area selectable via FOCUS flag

• Using Claude’s Security Review Skill in Claude Code
  articleas techniques2026-07-29It is written here as Cross-site scripting (XSS).

  XSS

• What Is AI Pentesting and How Does It Work?
  articleas techniques2026-07-27

  Heuristic-detectable vulnerability reliably caught by deterministic scanners

• SQL injection isn't dead
  articleas techniques2026-07-22It is written here as Cross-site scripting (XSS).

  context-heavy bug cited as one AI handles worse than SQL injection, with most AI-generated output found insecure

• BountyForge
  repoas techniques2026-07-22It is written here as XSS.

  Payload coverage

• Gabson0x/pentdem
  repoas techniques2026-07-20It is written here as XSS.

  Cross-Site Scripting vulnerability hunting, core class

• 0x1ceKing/HTB-Certified-Penetration-Testing-Specialist
  repoas techniques2026-07-18It is written here as Cross-Site Scripting (XSS).

  XSS

• Strix
  repoas techniques2026-07-15It is written here as XSS (stored/reflected/DOM).

  Client-side attack tested by Strix, including automated browser exploitation

• RAPTOR
  repoas techniques2026-06-28It is written here as XSS.

  Covered by Semgrep rules; DOM XSS coverage via browser-engine crawling listed as open contribution area

• Endor Labs: Claude Fable 5
  writeupas techniques2026-06-18It is written here as Cross-site scripting (XSS).

  Wagtail form field help_text rendered as HTML without escaping if not explicitly allowed

• ShulkwiSEC/bb-huge
  repoas techniques2026-06-05It is written here as XSS (Cross-Site Scripting).

  Web security vulnerability category covered by curated skills; example finding given: 'Reflected XSS in search' (CWE-79, CVSS 7.2)

• Datadog AI-Native SAST
  articleas techniques2026-05-31It is written here as Cross-site scripting (XSS).

  Vulnerability category targeted by traditional SAST rule matching

• Alice and Bob Learn Secure Coding: Chapter 2
  videoas techniques2026-05-11It is written here as Cross-Site Scripting (CWE-79).

  CWE-79