6 matches found
XanXSS
XanXSS XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different...
polyshell
PolyShell: Bash/Batch/PowerShell 폴리글랏 설명 PolyShell은 Bash, Windows Batch 및 PowerShell에서 동시에 유효한 스크립트입니다 즉, 폴리글랏. 따라서 PolyShell은 대상별 페이로드 없이 대부분의 시스템에서 실행될 수 있어 침투 테스트에 유용한 템플릿입니다. 또한 PolyShell은 USB Rubby Ducky, MalDuino, 또는 유사한 장치를 통한 입력 주입injection으로 전달 가능하도록 특별히 설계되었습니다. 사용 방법 독립 실행 스크립트로 사용 1...
CVE-2026-93598 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle
ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBundle as a bare class name, which is matched by exact equality and therefore does...
CVE-2026-93598 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle
ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBundle as a bare class name, which is matched by exact equality and therefore does...
PT-2026-95377
Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description The polyglot script sandbox contains an incomplete deny-list within com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED. While java.util.ResourceBundle is listed, the filter uses exact equalit...
XanXSS - A Simple XSS Finding Tool
XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different. XanXSS wor...