Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/09/09 3:18 p.m.11 views

hayabusa

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...

5.8AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/05 9:40 a.m.7 views

SentinelThread-Forensics

🛡️ Sentinel Thread Pro The High-Speed Windows Forensic Triage Platform 📋 The Mission In modern SOC operations, manual EVTX analysis is a death sentence for your MTTR Mean Time to Respond. Sentinel Thread Pro is built to bridge the gap between massive raw event logs and actionable forensic...

5.9AI score
SaveExploits0References2
EUVD
EUVD
added 2026/04/09 12:31 a.m.15 views

EUVD-2026-20767

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/08 10:16 p.m.13 views

CVE-2026-40028

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS0.002EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/08 9:35 p.m.28 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS0.002EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/08 9:35 p.m.35 views

CVE-2026-40028

Hayabusa versions prior to 3.8.0 contain a cross-site scripting (XSS) vulnerability in the HTML report output. An attacker can inject JavaScript into the Computer field of JSON-exported logs, which executes in the forensic examiner’s browser when viewing the generated HTML report, potentially lea...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/08 9:35 p.m.5 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6AI score0.002EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/08 9:35 p.m.10 views

CVE-2026-40028 Hayabusa < 3.8.0 XSS via JSON Log Import

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.1CVSS6.1AI score
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.23 views

Hayabusa 跨站脚本漏洞

Hayabusa is an open-source Windows event log forensic and threat hunting tool developed by Yamato Security. Versions prior to Hayabusa 3.8.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from HTML report outputs that had the same cross-site scripting vulnerabilities,...

5.4CVSS5.9AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.27 views

PT-2026-31465

Hayabusa versions prior to 3.8.0 contain a cross-site scripting XSS vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the...

5.4CVSS6.1AI score0.002EPSS
SaveExploits0References4
Rows per page
Query Builder