browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

PurplePanda

PurplePanda This tool fetches resources from different cloud/saas applications focusing on permissions in order to identify privilege escalation paths and dangerous permissions in the cloud/saas configurations. Note that PurplePanda searches both privileges escalation paths within a platform and...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

cirrusgo

CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest Help...

prey-android-client

Vous trouverez ici tout le code source des versions actuelle et en cours de développement du client Prey pour les appareils Android. Prey est une plateforme SaaS de suivi des appareils, de surveillance, de protection des données et de gestion des appareils. Son agent open source s'exécute sur les...

CVE-2026-3717

The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload in all versions up to and including 1.3.1 . The root cause is a missing capability check on the wp_save_signature_image function. This flaw allows unauthenticated attackers t...

CVE-2026-3717 CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload

The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...

EUVD-2026-96209

The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...

grove

Grove is a Software as a Service SaaS log collection framework, designed to support collection of logs from services which do not natively support log streaming. Grove enables teams to collect security related events from their vendors in a reliable and consistent way. This data may then be store...

Advantech WISE-IoTSuite/SaaS - SQL Injection

Advantech WISE-IoTSuite/SaaS Composer suffers from an unauthenticated SQL Injection vulnerability due to the unsafe use of the filename parameter within the URL path in PostgreSQL queries. Remote attackers can exploit this flaw by injecting SQL code such as the use of pgsleep for time delays to...

saas_enum

SaaS Enum SaaS Enum هي أداة سطر أوامر لاكتشاف منصات SaaS التي قد تستخدمها الشركة. تبحث الأداة عن إدخالات DNS تطابق أنماط المزودين المعروفة، وتقوم اختيارياً بإجراء فحوصات ويب خفيفة للتأكيد. التثبيت pip install -r requirements.txt الاستخدام الفحص الأساسي قدم الاسم المختصر للشركة النطاق الفرعي...

ciso-assistant-community

Star the project 🌟 to get releases notification and help growing the community! intuitem.com · SaaS Free trial · Roadmap · Docs · Languages · Discord · Frameworks CISO Assistant offre une nouvelle perspective sur la gestion de la cybersécurité et les pratiques GRC Gouvernance, Risques et Conformi...

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation pip install -r requirements.txt Usage Basic check...

CVE-2026-106126 Command Injection

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

CVE-2026-106126

A command injection vulnerability exists in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) . This flaw allows an authenticated, low-privileged attacker to execute arbitrary commands with SYSTEM privileges on the PDCe . The root cause is identified as CWE-78 (Improper Neu...

StalkPhish

StalkPhish project has been renamed StalkPhish-OSS You can find the new project page here: https://github.com/t4d/StalkPhish-OSS Online StalkPhish SaaS You can found our online StalkPhish SaaS application on https://www.Stalkphish.io and use the REST API available for free. Join us You can join u...

CVE-2026-23552

CVE-2026-23552 - قبول التوكنات عبر العوالم Realms في camel-keycloak نظرة عامة لا يتحقق KeycloakSecurityPolicy في Apache Camel من مطالبة iss المُصدِر في توكنات JWT مقابل العالم Realm المهيأ. وهذا يعني أن توكنًا صادرًا عن عالم Keycloak واحد يُقبل بصمت من قِبل سياسة مهيأة لعالم مختلف تمامًا، مما يكس...

PT-2026-108189

Name of the Vulnerable Software and Affected Versions Tenable Identity Exposure SaaS affected versions not specified Description A command injection flaw exists in the Active Directory Events Listener. This allows an authenticated attacker with low privileges to execute arbitrary commands with...

CVE-2025-65300

CVE-2025-65300 Description CVE-2025-65300 : Vulnérabilité de script intersite XSS persistante dans la plateforme SaaS Coohom Date de divulgation : 2025-10-28 Dernière mise à jour : 2025-10-28 Signalé par : Phisit Pupiw Fournisseur : Coohom CWE : CWE-79 – Cross-Site Scripting Résumé Une...

CVE-2026-18741

CVE-2026-18741 - XSS stocké dans Worksuite SaaS À propos CVE-2026-18741 est une vulnérabilité de type XSS stocké affectant les versions de Worksuite SaaS antérieures à 6.0.14. Le problème se situe dans le module de gestion des actifs Asset Management. Des entrées contrôlées par l'utilisateur...