
xss2shell
🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit
defensive-toolspayload-generationpenetration-testing+6

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.

Generates malicious DOCX files exploiting CVE-2021-40444 to achieve remote code execution via crafted CAB and HTML payloads, with a built-in hosting…