Lucene search
+L

792 matches found

Kitploit
Kitploit
added 2026/09/13 5:48 p.m.10 views

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:50 p.m.7 views

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:23 p.m.13 views

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 3:57 p.m.8 views

grove

Grove es un marco de recopilación de registros de Software como Servicio SaaS, diseñado para admitir la recopilación de registros de servicios que no admiten de forma nativa la transmisión de registros. Grove permite a los equipos recopilar eventos relacionados con la seguridad de sus proveedores...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:11 p.m.39 views

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 12:34 p.m.8 views

cirrusgo

CirrusGo Una herramienta rápida para escanear aplicaciones SAAS, PAAS escrita en Go Soporte de aplicaciones SAAS : salesforce contentful próxima versión Nota: el flag -o output no funciona instalación : golang 1.18Ver root@kitploit: go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:53 a.m.7 views

PurplePanda

PurplePanda Esta herramienta obtiene recursos de diferentes aplicaciones cloud/saas centrándose en permisos para identificar rutas de escalada de privilegios y permisos peligrosos en las configuraciones cloud/saas. Tenga en cuenta que PurplePanda busca tanto rutas de escalada de privilegios dentr...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 3:47 a.m.8 views

CVE-2026-18741

CVE-2026-18741 - Stored XSS in Worksuite SaaS About CVE-2026-18741 is a Stored XSS vulnerability affecting Worksuite SaaS versions prior to 6.0.14. The issue is located in the Asset Management module. User-controlled input can be stored through fields such as: Location Description The stored inpu...

4.8CVSS5.9AI score0.00148EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:55 a.m.6 views

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...

6AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.22 views

Advantech WISE-IoTSuite/SaaS - SQL Injection

Advantech WISE-IoTSuite/SaaS Composer suffers from an unauthenticated SQL Injection vulnerability due to the unsafe use of the filename parameter within the URL path in PostgreSQL queries. Remote attackers can exploit this flaw by injecting SQL code such as the use of pgsleep for time delays to...

10CVSS5.9AI score0.40378EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/13 1:48 a.m.4 views

trivy-plugin-aqua

trivy-plugin-aqua Trivy plugin for integration with Aqua Security SaaS platform Usage Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files Set Aqua plugin as Trivy's current default plugin by exporting an environment variable root@kitploit: export...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:17 a.m.4 views

StalkPhish

El proyecto StalkPhish ha sido renombrado como StalkPhish-OSS Puedes encontrar la nueva página del proyecto aquí: https://github.com/t4d/StalkPhish-OSS StalkPhish SaaS en línea Puedes encontrar nuestra aplicación SaaS StalkPhish en línea en https://www.Stalkphish.io y usar la API REST disponible ...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 3:59 p.m.5 views

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...

9.1CVSS5.9AI score0.00428EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 2:34 a.m.9 views

CVE-2025-65300

CVE-2025-65300 Descripción CVE-2025-65300: Vulnerabilidad de Cross-Site Scripting XSS almacenado en la plataforma SaaS de Coohom Fecha de divulgación: 2025-10-28 Última actualización: 2025-10-28 Reportero: Phisit Pupiw Proveedor: Coohom CWE: CWE-79 – Cross-Site Scripting Resumen Se identificó una...

5.4CVSS5.8AI score0.00199EPSS
SaveExploits1
OSV
OSV
added 2026/09/01 5:26 p.m.6 views

MAL-2026-15816 Malicious code in order-package-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09ffe18928cf319d13dc52111750c394330d53b38b4d8814b0d2372471308e The package's postinstall hook executes index.js, which sweeps installer-owned secrets from the home directory...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/01 5:26 p.m.15 views

Malicious code in order-package-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09ffe18928cf319d13dc52111750c394330d53b38b4d8814b0d2372471308e The package's postinstall hook executes index.js, which sweeps installer-owned secrets from the home directory...

5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/08/13 9:17 p.m.9 views

CVE-2026-18741

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS0.00148EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/13 8:45 p.m.31 views

CVE-2026-18741

Summary: CVE-2026-18741 affects Worksuite SaaS prior to v6.0.14 and is a stored cross-site scripting vulnerability in the Asset Management module. The flaw allows authenticated administrators to inject arbitrary JavaScript by submitting payloads into the Location or Description fields during asse...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/13 8:45 p.m.12 views

EUVD-2026-58471

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/08/13 8:45 p.m.10 views

CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
Rows per page
Query Builder