polyshell

PolyShell : un polyglotte Bash/Batch/PowerShell Ce que c'est PolyShell est un script valide simultanément en Bash, Windows Batch et PowerShell c'est-à-dire un polyglotte. Cela fait de PolyShell un modèle utile pour les tests de pénétration, car il peut être exécuté sur la plupart des systèmes san...

Exploit for Out-of-bounds Write in Mediatek Software_Development_Kit

CVE-2025-20720 — PolyShell: Magento 2 Unauthenticated File Uploa...

Magento-Polyshell-RCE

Magento-Polys...

Magento Polyshell — The Latest Magento Threat (APSB25-94)

...

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its...

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

Sansec is warning of a critical security flaw in Magento's REST API that could allow unauthenticated attackers to upload arbitrary executables and achieve code execution and account takeover. The vulnerability has been codenamed PolyShell by Sansec owing to the fact that the attack hinges on...