Lucene search
+L

1621877 matches found

Kitploit
Kitploit
added 2026/09/10 3:45 p.m.41 views

sysflow

SysFlow: Cloud-native system telemetry pipeline This repository hosts the documentation and issue tracker for all SysFlow projects. Quick reference Documentation : the SysFlow Documentation Where to get help : the SysFlow Community Slack Where to file issues : the github issue tracker Source of...

5.7AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/10 3:45 p.m.13 views

mobsfscan

mobsfscan mobsfscan es una herramienta de análisis estático que puede encontrar patrones de código inseguros en tu código fuente de Android e iOS. Es compatible con Java, Kotlin, Android XML, iOS Info.plist, Swift y código Objective C. mobsfscan utiliza las reglas de análisis estático de MobSF y...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 3:44 p.m.12 views

Threat-Hunting

Caza de Amenazas | Ingeniería de Detección Colección de consultas de caza de amenazas y detección para: CrowdStrike Falcon usando CQL – CrowdStrike Query Language Microsoft Defender XDR usando KQL – Kusto Query Language Diseñado para detectar procesos sospechosos, comportamientos de red anómalos,...

5.9AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/10 3:43 p.m.4 views

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

5.9CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/10 3:43 p.m.11 views

CVE-2026-87913

The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...

5.9CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/10 3:43 p.m.7 views

EUVD-2026-75571

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

5.9CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/10 3:43 p.m.10 views

CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

5.9CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/10 3:42 p.m.12 views

CVE-2026-87912

CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...

5.9CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/10 3:42 p.m.10 views

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

5.9CVSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/10 3:42 p.m.4 views

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

5.9CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/10 3:42 p.m.6 views

EUVD-2026-75569

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

5.9CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 3:40 p.m.7 views

CVE-2024-55347

CVE Disclosure: CVE-2024-55347 Public Disclosure of CVE-2024-55347 🚀 Date: 10-02-2025 Summary A Binary Planting vulnerability in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 allows attackers to escalate privileges and execute arbitrary code by placing a maliciously crafted Binary file in a...

5.9AI score
SaveExploits0
CVE
CVE
added 2026/09/10 3:39 p.m.11 views

CVE-2026-88013

rclone (a command-line tool for syncing files to/from cloud storage) is affected in versions 1.49.0 through 1.75.1 due to its HTTP backend attaching custom headers (set via --http-headers or headers=) to outgoing requests while following redirects without a backend-specific http.Client.CheckRedir...

3.7CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/10 3:39 p.m.8 views

EUVD-2026-75567

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-headers or headers= to requests in backend/http/http.go, while its fshttp.NewClient client follows...

3.7CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/10 3:39 p.m.11 views

CVE-2026-88013 rclone: http backend forwards custom/auth headers to a different host on redirect

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-headers or headers= to requests in backend/http/http.go, while its fshttp.NewClient client follows...

3.7CVSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/09/10 3:39 p.m.4 views

CVE-2026-88013 rclone: http backend forwards custom/auth headers to a different host on redirect

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-headers or headers= to requests in backend/http/http.go, while its fshttp.NewClient client follows...

3.7CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 3:39 p.m.9 views

tap-ducky

TapDucky - Inyector de pulsaciones de teclado USB HID para Android TapDucky - Inyector de pulsaciones de teclado USB HID para Android Ejecutor de DuckyScript de código abierto para Android rooteado con soporte de USB Gadget ConfigFS TapDucky te permite crear, personalizar, programar y ejecutar...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 3:39 p.m.6 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...

8.8CVSS7.2AI score0.01121EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 3:38 p.m.31 views

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

6.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 3:38 p.m.9 views

mariana-trench

Mariana Trench Mariana Trench es una plataforma de análisis estático enfocada en seguridad dirigida a Android. Esta guía te guiará a través de la configuración de Mariana Trench en tu máquina y te llevará a encontrar tu primera vulnerabilidad de ejecución remota de código en una pequeña aplicació...

6AI score
SaveExploits0References2
Rows per page
Query Builder