Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/08/29 9:40 a.m.3 views

SentinelThread-Forensics

🛡️ Sentinel Thread Pro La piattaforma forense ad alta velocità per Windows triage 📋 La Missione Nelle operazioni SOC moderne, l'analisi manuale degli EVTX è una condanna a morte per il tuo MTTR Mean Time to Respond. Sentinel Thread Pro è costruito per colmare il divario tra enormi log grezzi e...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 5:53 p.m.5 views

hayabusa

Generatore veloce di timeline forensi per log eventi Windows e strumento di threat hunting. Scritto in Rust memory-safe da Yamato Security — l'unico strumento open-source con supporto completo per Sigma, incluse le regole di correlazione v2. !https://img.shi...

5.4AI score
SaveExploits0References16
EUVD
EUVD
added 2026/04/09 12:31 a.m.15 views

EUVD-2026-20767

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/08 10:16 p.m.13 views

CVE-2026-40028

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS0.002EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/08 9:35 p.m.27 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS0.002EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/08 9:35 p.m.34 views

CVE-2026-40028

Hayabusa versions prior to 3.8.0 contain a cross-site scripting (XSS) vulnerability in the HTML report output. An attacker can inject JavaScript into the Computer field of JSON-exported logs, which executes in the forensic examiner’s browser when viewing the generated HTML report, potentially lea...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/04/08 9:35 p.m.9 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.1CVSS6.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 9:35 p.m.5 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.23 views

Hayabusa 跨站脚本漏洞

Hayabusa is an open-source Windows event log forensic and threat hunting tool developed by Yamato Security. Versions prior to Hayabusa 3.8.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from HTML report outputs that had the same cross-site scripting vulnerabilities,...

5.4CVSS5.9AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.26 views

PT-2026-31465

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References4
Rows per page
Query Builder