Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/05 7:25 a.m.•11 views

saas_enum

SaaS Enum SaaS Enum은 기업이 사용 중일 수 있는 SaaS 플랫폼을 발견하기 위한 명령줄 도구입니다. 이 도구는 알려진 공급자 패턴과 일치하는 DNS 항목을 찾고, 선택적으로 확인을 위해 가벼운 웹 검사를 수행합니다. 설치 pip install -r requirements.txt 사용법 기본 확인 모든 공급자에 대해 테스트할 회사의 짧은 이름하위 도메인을 입력하세요: python saasenum.py -i example 배치 모드 파일에서 여러 회사를 처리하고 결과를 CSV로 저장합니다: python...

6.3AI score
SaveExploits0References1
NVD
NVD
•added 2026/10/04 3:16 p.m.•10 views

CVE-2026-105214

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

2.3CVSS0.00215EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/04 1:10 p.m.•36 views

CVE-2026-105214 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

2.3CVSS0.00215EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/04 1:10 p.m.•13 views

EUVD-2026-92107

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

2.3CVSS6AI score0.00215EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/04 1:10 p.m.•13 views

CVE-2026-105214

Zitadel versions prior to 4.16.2 are vulnerable to a Server-Side Request Forgery (SSRF) flaw during organization domain HTTP verification. The root cause is the use of Go's default http.Get instead of a protected client for challenge fetches. Attackers can register domains that redirect to loopba...

2.3CVSS6AI score0.00215EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/04 12:00 a.m.•4 views

PT-2026-104638

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP verification. The challenge fetch uses Go's default http.Get instead of the protected client, so attackers can register...

2.3CVSS6AI score0.00215EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/02 1:31 p.m.•5 views

cdn-ip-scanner

CDN IP Scanner V2.0 높은 정확도 • 초고속 • AI 기반 English • فارسی • Download • Donate 🇬🇧 English CDN IP Scanner란 무엇인가요? CDN IP Scanner 는 가장 빠른 CDN콘텐츠 전송 네트워크 IP 주소를 스캔하고 찾기 위한 강력한 웹 기반 도구입니다. Cloudflare , Fastly 및 기타 CDN 네트워크와 같은 제공업체로부터 깨끗하고 지연 시간이 낮은 IP를 발견할 수 있도록 도와줍니다. 이 스캐너는 /cdn-cgi/trace 엔드포인트 확인과 함...

6.3AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/14 9:02 p.m.•57 views

CVE-2026-44430 MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist

The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the Registry's HTTP-based namespace verification POST /v0/auth/http, POST /v0.1/auth/http uses safeDialContext internal/api/handlers/v0/auth/http.go:67-110 to refuse dialling...

6.3CVSS0.00286EPSS
SaveExploits1References1
Rows per page
Query Builder