Cybersecurity Glossary

Cross-Site Scripting. A vulnerability that allows attackers to inject malicious client-side scripts into web pages viewed by other users, potentially stealing session cookies or credentials.

XML External Entity injection. An attack against applications that parse XML input, allowing attackers to read local files, perform SSRF, or execute denial of service.

Extended Detection and Response. A unified security platform that collects and correlates data across multiple security layers for comprehensive threat detection and response.

A cross-site scripting payload designed to execute in multiple contexts simultaneously, bypassing various sanitization and encoding filters.

An attack that injects malicious XPath queries into applications that use XML data stores, similar to SQL injection for XML databases.

A standard defining the format of public key certificates used in TLS/SSL, code signing, and email encryption.

A malicious XML document designed to consume excessive resources during parsing, causing denial of service through entity expansion.

An attack that manipulates XML data sent to an application to modify queries, access unauthorized data, or cause denial of service.

An HTTP header that prevents a page from being rendered in iframes, protecting against clickjacking attacks.