CVE-2026-80192

@better-auth/sso contains two domain-ownership authentication bypass flaws affecting versions before 1.6.27 (and before 1.4.8 in the 1.4.x line, before 1.7.0-rc.5 in the 1.7 prerelease line). When domain verification is disabled , an authenticated organization owner/administrator can register an ...

CVE-2026-80192 better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...

cloudfrunt

CloudFrunt CloudFrunt ist ein Werkzeug zur Identifizierung falsch konfigurierter CloudFront-Domänen. Hintergrund CloudFront ist ein Content Delivery Network CDN, das von Amazon Web Services AWS bereitgestellt wird. CloudFront-Benutzer erstellen "Distributionen", die Inhalte von bestimmten Quellen...

PrettyTrusts

PrettyTrusts Testen Sie es aus unter:http://peewpw.github.io/PrettyTrusts Visualisiert die Ausgabe von PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Übergeben Sie die CSV-Datei und erhalten Sie ein hübsches Diagramm zum Ausprobieren! Sollte mit älteren und neuen...

CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

creddump7

Informazioni Questo repository contiene le mie modifiche al programma originale 'creddump' disponibile su: https://code.google.com/p/creddump/ Non ho scritto il programma originale. Ho combinato molte patch e correzioni che ho visto da diversi forum e suggerimenti degli utenti, e ho modificato...

sam-the-admin

Sfruttando CVE-2021-42278 e CVE-2021-42287 per impersonare DA da un utente di dominio standard Problemi noti non funzionerà al di fuori di kali, lo aggiornerò più avanti : Scopri CVE-2021-42287/CVE-2021-42278 Weaponizzazione spoofing di sAMAccountName...

SearchOrg

SearchOrg Inserendo il dominio di posta elettronica di un'azienda si ottengono informazioni usando DNS, NMAP e Shodan Da tenere presente Sulla macchina deve essere installato NMAP affinché si possa usare il comando È necessario avere un account su Shodan e caricare l'APIKey dove indicato dallo...

CVE-2026-62861

TypeBot (chatbot builder) is vulnerable to cross-tenant custom-domain removal prior to 3.18.0 . The root cause is in the custom-domain delete handler (handleDeleteCustomDomain.ts): it authorizes a caller against a client-supplied workspaceId but forwards the client-supplied domain name to the sha...

CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183

Apache Tomcat is affected by a TOCTOU race condition when creating Unix Domain Sockets, allowing an unauthorised local user to access the socket. The Tomcat security team rates this as Low severity, though the CNA-assigned CVSS 3.1 score is 8.1 (HIGH) . Affected versions: 11.0.0-M1 through 11.0.2...

Set-ZerologonMitigation

Set-ZerologonMitigation Schützen Sie Ihre Domänencontroller vor Zerologon CVE-2020-1472. Verwendung Nach der Installation des August-2020-Sicherheitsupdates oder einer späteren kumulativen Version führen Sie das Skript einfach auf jedem von Ihren Domänencontrollern aus. root@kitploit:...

Reverse_ip_Multithreading1

ReverseipMultithreading1 Doação : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

RED_HAWK

Versione 2.0.0 Di R3D@0R2H1N A.K.A Tuhinshubhra Strumento tutto in uno per Information Gathering e Vulnerability Scanning Scansioni che puoi eseguire con RED HAWK : Scansione di base Titolo del sito NUOVO Indirizzo IP Rilevamento del server web MIGLIORATO Rilevamento CMS Rilevamento Cloudflare...

ADSpider

root@kitploit: d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 //\/ ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888...

iptodomain

iptodomain V2 Update V2: Es wurde von Python 2.7 auf 3.8.10 migriert. Jetzt unterstützt es eine Eingabedatei und CSV-Ausgabedatei. Beschreibung: Dieses Tool ermöglicht es Ihnen, Domains aus einem IP-Bereich zu extrahieren, indem es die historischen Informationen verwendet, die in Virustotal...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

Olyx

Olyx Un'applicazione Android moderna per l'analisi completa della sicurezza degli URL, che combina più API di rilevamento delle minacce con un rilevamento avanzato dello spoofing dei domini per proteggere gli utenti da siti web dannosi. Schermate Caratteristiche Analisi di Sicurezza Multi-API...

Recheck

Recheck Recheck Domain tief scannen und alle möglichen Domains für eine Übernahme finden Schnelllinks Demo Installation Funktionen Beispiel Ausführung / Installation Wie ausführen? root@kitploit: git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Funktionen Funktion|...