Lucene search
+L

5643 matches found

Kitploit
Kitploit
added 2026/08/25 7:08 p.m.3 views

subbrute

subdomain-bruteforcer SubBrute SubBrute is a community driven project with the goal of creating the fastest, and most accurate subdomain enumeration tool. Some of the magic behind SubBrute is that it uses open resolvers as a kind of proxy to circumvent DNS rate-limiting...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:55 p.m.77 views

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:50 p.m.23 views

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

5.6AI score
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:33 a.m.10 views

CVE-2026-79661

Ech0 (through 4.5.6) exposes the PUT /api/echo/like/:id endpoint on its public router group with no authentication and no rate limiting . An unauthenticated attacker can increment the fav_count counter of any echo—including private ones—by supplying its UUID, which is harvestable from the public ...

6.9CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.4 views

EUVD-2026-65453

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...

6.9CVSS5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.2 views

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

5.7AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.1 views

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:12 a.m.1272 views

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

7.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 4:10 a.m.58 views

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

7.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:10 a.m.400 views

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

7.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 3:23 a.m.154 views

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

7.5AI score
SaveExploits0References4
NVD
NVD
added 2026/08/25 2:16 a.m.11 views

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail, and it triggers a password reset...

6.9CVSS
SaveExploits0References4
NVD
NVD
added 2026/08/25 2:16 a.m.9 views

CVE-2026-72699

The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...

9.3CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 2:16 a.m.10 views

CVE-2026-72700

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

8.7CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 1:30 a.m.15 views

CVE-2026-75575 Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail, and it triggers a password reset...

6.9CVSS
SaveExploits0References4
CVE
CVE
added 2026/08/25 1:30 a.m.12 views

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, allowing an unauthenticated caller to invoke it via DDP or the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail. Because no DDPRateLimiter rule is registered, an attacker can send an unbounded v...

6.9CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 1:30 a.m.7 views

EUVD-2026-65218

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail, and it triggers a password reset...

6.9CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 1:30 a.m.6 views

EUVD-2026-65214

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

8.7CVSS5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 1:30 a.m.10 views

CVE-2026-72699

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration . The register() method in classes/Login.php throws a distinct exception (EMAIL_NOT_AVAILABLE) when a submitted email already belongs to an existing account, while allowing registration to pr...

9.3CVSS5.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 1:30 a.m.9 views

CVE-2026-72699 Grav Login Plugin before 3.9.1 Email Enumeration via Registration

The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...

9.3CVSS
SaveExploits0References2
Rows per page
Query Builder