Fourteen_Endpoints

Los intermediarios Empresas fantasma dentro del relay de privacidad de Apple Una LLC anónima de Delaware publica una app de oración bíblica, un diario personal y una herramienta de identificador de llamadas en el App Store. Esa entidad opera infraestructura de relay cifrado dentro de la red de...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

CVE-2026-85616

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

CVE-2026-85616

Snipe-IT versions before 8.6.2 contain an authorization bypass in checkout-acceptance report actions when Full Multiple Company Support is enabled. An authenticated user with the reports.view permission can exploit a null check on the legacy users.company_id column to enumerate sequential accepta...

EUVD-2026-71035

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

ARC-Browser-Address-Bar-Spoofing-PoC

Suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS CVE-2024-25733 PoC de suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS Exploit PoC Prueba de concepto root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.rando...

WordPress Button Generator <2.3.3 - Remote File Inclusion

WordPress Button Generator before 2.3.3 within the wow-company admin menu page allows arbitrary file inclusion with PHP extensions as well as with data:// or http:// protocols, thus leading to cross-site request forgery and remote code execution. id: CVE-2021-25052 info: name: WordPress Button...

CVE-2021-44228-Advisories

CVE-2021-44228-Avisos Por favor, abre Issues para incluir un aviso / No PRs. Por favor revisa esta lista, tuvo más tracción que la mía : https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592 Esta lista incluye todos los avisos de empresas, incluso si solo están confirmando que no usan...

MAL-2026-15827 Malicious code in company-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85 companysdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys /.ssh, cloud...

Malicious code in company-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85 companysdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys /.ssh, cloud...

CVE-2025-22777

CVE-2025-22777 GiveWP – Plugin de Donaciones y Plataforma de Recaudación de Fondos = 3.19.3 - Inyección de Objetos PHP No Autenticada Descripción El plugin GiveWP – Plugin de Donaciones y Plataforma de Recaudación de Fondos para WordPress es vulnerable a la Inyección de Objetos PHP en todas las...

sentryexploit

MobileIron Sentry CVE-2023-38035 extracción de información Características Extraer nombre de la empresa y correo de contacto Prueba de vulnerabilidad Uso root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Compan...

coeus-ci

Coeus CI Inteligencia Competitiva que lo ve todo. Nombrado en honor a Coeus SEE-us, el Titán griego de los cien ojos de la mente inquisitiva — cuyo nombre significa literalmente "indagar". CI significa Inteligencia Competitiva. Una herramienta OSINT de inteligencia empresarial que construye...

CVE-2026-51956

A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another tenant's company record by changing only the numeric ID in the /company/id endpoint. The application does not enforce tenant-level...

EUVD-2026-69390

A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another tenant's company record by changing only the numeric ID in the /company/id endpoint. The application does not enforce tenant-level...