Lucene search
+L

64492 matches found

EUVD
EUVD
•added 2026/09/30 6:33 p.m.•1 views

EUVD-2026-90086

A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unknown function of the file /admin/ of the component Admin Area. Such manipulation of the argument ID leads to authorization bypass. The attac...

6.5CVSS5.3AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/30 4:30 p.m.•2 views

CVE-2026-103233

A security vulnerability exists in the AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c) within the Admin Area component. The flaw impacts an unknown function in the /admin/ file, where manipulating the argument ID leads to an authorization bypass...

6.5CVSS5.3AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 3:59 p.m.•15 views

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connectopenid-connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or...

6.3AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2026/09/30 3:15 p.m.•7 views

CVE-2026-103229 AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...

7.5CVSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 2:46 p.m.•18 views

paniclock

PanicLock es una utilidad de la barra de menús de macOS que desactiva instantáneamente Touch ID y bloquea la pantalla con un solo clic o cerrando la tapa de tu portátil. PanicLock llena un vacío que macOS deja abierto: no hay una forma integrada de desactivar Touch ID instantáneamente cuando es...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/30 2:46 p.m.•13 views

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT is the most advanced and versatile OTP & SMS capture bot that is capable of getting OTP & SMS codes from victims by impersonating a company or bank. You can use this to get OTP for logins, banks, credit cards, apple pay, and more. Join...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 2:29 p.m.•17 views

apimspray

apimspray apimspray es un kit especializado de rociado de contraseñas de Entra ID diseñado para investigaciones de seguridad autorizadas y Red Teaming. Utiliza las puertas de enlace de Azure API Management APIM como una capa de proxy distribuida y rotatoria para la rotación de IP. Lea la...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 2:23 p.m.•18 views

tangalanga

Tangalanga Escáner de conferencias Zoom. Este escáner verificará un ID de reunión aleatorio y devolverá información si está disponible. Instalación Primero intenta ver si hay alguna versión precompilada para la fecha: https://github.com/elcuervo/tangalanga/releases. Estas versiones ya tienen un...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 1:36 p.m.•19 views

BrowserBox

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🖥️ NEW in v18.10.0 — the BrowserBox desktop app BETA BrowserBox now ships with a desktop app for running your BrowserBox without the command line. Start and stop sessions, pick how people reach it direct...

5.7AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/30 1:28 p.m.•46 views

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 1:05 p.m.•19 views

EvilMist

EvilMist EvilMist es una colección de scripts y utilidades diseñados para apoyar la auditoría de configuración de seguridad en la nube, pruebas de penetración en la nube y red teaming en la nube. El kit de herramientas ayuda a identificar configuraciones incorrectas, evaluar rutas de escalado de...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 12:09 p.m.•22 views

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

6.6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/30 12:08 p.m.•22 views

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do. oo=|= ╬╬┤ ╠╬╬...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 12:02 p.m.•22 views

TokenFlare

TokenFlare Serverless AITM Phishing Simulation Framework for Entra ID / M365 Features Lean: Core logic in src/worker.js only 530 lines of JavaScript. Modular: Supports a number of OAuth flows, with Intune Conditional Access bypass support out of the box Easily tweaked: Set up client branding, URL...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 11:40 a.m.•14 views

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 11:22 a.m.•42 views

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

5.9AI score
SaveExploits0References13
Kitploit
Kitploit
•added 2026/09/30 10:53 a.m.•17 views

MAAD-AF

MAAD Attack Framework MAAD-AF es una herramienta de ataque en la nube de código abierto para entornos de Microsoft 365 y Entra ID Azure AD. MAAD-AF ofrece pruebas de seguridad simples, rápidas y efectivas. Valide los controles en la nube de Microsoft y pruebe las capacidades de detección y...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/30 10:47 a.m.•17 views

CVE-2025-59501

CVE-2025-59501 POC que abusa de la API AdminService de SCCM cuando la integración con Entra ID está habilitada para elevarse a Administrador Completo y tomar el control de una jerarquía de SCCM. Más detalles se pueden encontrar en este blog Requisitos uv Instalación git clone...

4.8CVSS6.1AI score0.03038EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 10:00 a.m.•11 views

m33tfinder

M33tfinder is a tool to detect active conference ID ranges in a Cisco Meeting Server server. M33tbreak is a tool to test weak passcodes against a conference in Cisco Meeting Server server. Pins.txt contains, for example, 4 digits passcodes. This tools are intended to check if the server is...

7.5CVSS6.7AI score0.02184EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 9:54 a.m.•12 views

jwt-key-id-injector

Inyector de ID de Clave JWT Script simple de Python para verificar una vulnerabilidad hipotética de JWT. Supongamos que hay una aplicación que utiliza tokens JWT firmados con el algoritmo HS256. Un token de ejemplo se ve así:...

6AI score
SaveExploits0References1
Rows per page
Query Builder