Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/05 10:17 p.m.•29 views

XanXSS

XanXSS XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 10:39 p.m.•12 views

polyshell

PolyShell: Bash/Batch/PowerShell 폴리글랏 설명 PolyShell은 Bash, Windows Batch 및 PowerShell에서 동시에 유효한 스크립트입니다 즉, 폴리글랏. 따라서 PolyShell은 대상별 페이로드 없이 대부분의 시스템에서 실행될 수 있어 침투 테스트에 유용한 템플릿입니다. 또한 PolyShell은 USB Rubby Ducky, MalDuino, 또는 유사한 장치를 통한 입력 주입injection으로 전달 가능하도록 특별히 설계되었습니다. 사용 방법 독립 실행 스크립트로 사용 1...

6.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/18 1:20 p.m.•9 views

CVE-2026-93598 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBundle as a bare class name, which is matched by exact equality and therefore does...

7.1CVSS6.5AI score0.00633EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/18 1:20 p.m.•13 views

CVE-2026-93598 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBundle as a bare class name, which is matched by exact equality and therefore does...

7.1CVSS6.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•6 views

PT-2026-95377

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description The polyglot script sandbox contains an incomplete deny-list within com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED. While java.util.ResourceBundle is listed, the filter uses exact equalit...

7.1CVSS6.1AI score0.00633EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2019/04/06 9:12 p.m.•188 views

XanXSS - A Simple XSS Finding Tool

XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different. XanXSS wor...

6.3AI score
SaveExploits0References4
Rows per page
Query Builder