CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

310 matches found

Kitploit•added 2026/11/02 12:56 p.m.•35 views

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

6.2AI score

SaveExploits0References1

Kitploit•added 2026/11/02 10:57 a.m.•34 views

goGetBucket

goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...

6.2AI score

SaveExploits0References1

Kitploit•added 2026/11/02 10:10 a.m.•26 views

s3-account-search

S3 Account Search This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you...

6.3AI score

SaveExploits0

Kitploit•added 2026/11/02 7:01 a.m.•111 views

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

6.2AI score

SaveExploits0

Kitploit•added 2026/11/02 5:59 a.m.•122 views

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...

6AI score

SaveExploits0

Kitploit•added 2026/11/01 6:33 a.m.•55 views

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...

6.1AI score

SaveExploits0

Kitploit•added 2026/11/01 2:14 a.m.•28 views

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

9.4CVSS6AI score0.00628EPSS

SaveExploits17References1

Kitploit•added 2026/10/31 10:56 a.m.•21 views

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentication bypass CVE-2025-2825 PoC This script exploits the CrushFTP authentication bypass vulnerability in versions: 10.0.0 10.8.3 11.0.0 11.3.0 How It Works CrushFTP's AWS S3-style authentication can be bypassed using: A fake but valid-looking...

9AI score

SaveExploits8

Kitploit•added 2026/10/30 7:02 p.m.•20 views

bucket-brute

bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...

6.3AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•15 views

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-cloudwatchlogs, nuclei, crossplane-provider-aws-memorydb, crossplane-provider-aws-firehose, crossplane-provider-aws-route53, crossplane-provider-family-aws, crossplane-provider-azure-authorization, crossplane-provider-keycloak,...

5.9AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•18 views

CVE-2026-100352 vulnerabilities

7.5CVSS7.2AI score0.00595EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•16 views

GHSA-RJ39-CV6W-8WV7 vulnerabilities

5.9AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•16 views

CVE-2026-100353 vulnerabilities

7.5CVSS7.2AI score0.00335EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•16 views

CVE-2026-100354 vulnerabilities

7.5CVSS5.9AI score0.00435EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•16 views

GHSA-VRCC-3CH7-HPPW vulnerabilities

5.9AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•17 views

CVE-2026-100348 vulnerabilities

5.3CVSS5.9AI score0.00372EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•16 views

CVE-2026-100351 vulnerabilities

7.4CVSS7.2AI score0.00488EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•17 views

GHSA-23VG-4CJM-66Q5 vulnerabilities

5.9AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•18 views

GHSA-FH4F-47MF-F2GJ vulnerabilities

5.9AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•18 views

GHSA-G8CF-RCJF-C8CF vulnerabilities

5.9AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by