Lucene search
+L

792 matches found

Kitploit
Kitploit
added 2026/09/13 7:53 a.m.7 views

PurplePanda

PurplePanda This tool fetches resources from different cloud/saas applications focusing on permissions in order to identify privilege escalation paths and dangerous permissions in the cloud/saas configurations. Note that PurplePanda searches both privileges escalation paths within a platform and...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 5:12 a.m.10 views

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:47 a.m.7 views

CVE-2026-18741

CVE-2026-18741 - Stored XSS in Worksuite SaaS About CVE-2026-18741 is a Stored XSS vulnerability affecting Worksuite SaaS versions prior to 6.0.14. The issue is located in the Asset Management module. User-controlled input can be stored through fields such as: Location Description The stored inpu...

4.8CVSS5.9AI score0.00148EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:23 a.m.13 views

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 3:04 a.m.8 views

grove

Grove is a Software as a Service SaaS log collection framework, designed to support collection of logs from services which do not natively support log streaming. Grove enables teams to collect security related events from their vendors in a reliable and consistent way. This data may then be store...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:55 a.m.5 views

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...

6AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.22 views

Advantech WISE-IoTSuite/SaaS - SQL Injection

Advantech WISE-IoTSuite/SaaS Composer suffers from an unauthenticated SQL Injection vulnerability due to the unsafe use of the filename parameter within the URL path in PostgreSQL queries. Remote attackers can exploit this flaw by injecting SQL code such as the use of pgsleep for time delays to...

10CVSS5.9AI score0.40378EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/13 1:48 a.m.4 views

trivy-plugin-aqua

trivy-plugin-aqua Plugin de Trivy para integración con la plataforma SaaS de Aqua Security Uso Las opciones de Trivy deben pasarse después de --. Trivy recibe un directorio de destino que contiene archivos IaC Establece el plugin de Aqua como el plugin predeterminado actual de Trivy exportando un...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:42 a.m.39 views

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 2:17 p.m.7 views

saas_enum

SaaS Enum SaaS Enum es una herramienta de línea de comandos para descubrir las plataformas SaaS que una empresa puede estar utilizando. La herramienta busca registros DNS que coincidan con patrones de proveedores conocidos y, opcionalmente, realiza comprobaciones web ligeras para confirmar...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:21 a.m.7 views

cirrusgo

CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver root@kitploit: go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:17 a.m.4 views

StalkPhish

StalkPhish project has been renamed StalkPhish-OSS You can find the new project page here: https://github.com/t4d/StalkPhish-OSS Online StalkPhish SaaS You can found our online StalkPhish SaaS application on https://www.Stalkphish.io and use the REST API available for free. Join us You can join u...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 3:59 p.m.5 views

CVE-2026-23552

CVE-2026-23552 - Aceptación de tokens entre reinos en camel-keycloak Resumen La KeycloakSecurityPolicy de Apache Camel no valida la reclamación iss emisor de los tokens JWT contra el reino configurado. Esto significa que un token emitido por un reino de Keycloak es aceptado silenciosamente por un...

9.1CVSS5.9AI score0.00428EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 2:34 a.m.9 views

CVE-2025-65300

CVE-2025-65300 Descripción CVE-2025-65300: Vulnerabilidad de Cross-Site Scripting XSS almacenado en la plataforma SaaS de Coohom Fecha de divulgación: 2025-10-28 Última actualización: 2025-10-28 Reportero: Phisit Pupiw Proveedor: Coohom CWE: CWE-79 – Cross-Site Scripting Resumen Se identificó una...

5.4CVSS5.8AI score0.00199EPSS
SaveExploits1
OSV
OSV
added 2026/09/01 5:26 p.m.6 views

MAL-2026-15816 Malicious code in order-package-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09ffe18928cf319d13dc52111750c394330d53b38b4d8814b0d2372471308e The package's postinstall hook executes index.js, which sweeps installer-owned secrets from the home directory...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/01 5:26 p.m.14 views

Malicious code in order-package-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09ffe18928cf319d13dc52111750c394330d53b38b4d8814b0d2372471308e The package's postinstall hook executes index.js, which sweeps installer-owned secrets from the home directory...

5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/08/13 9:17 p.m.9 views

CVE-2026-18741

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS0.00148EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/13 8:45 p.m.31 views

CVE-2026-18741

Summary: CVE-2026-18741 affects Worksuite SaaS prior to v6.0.14 and is a stored cross-site scripting vulnerability in the Asset Management module. The flaw allows authenticated administrators to inject arbitrary JavaScript by submitting payloads into the Location or Description fields during asse...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/13 8:45 p.m.12 views

EUVD-2026-58471

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/08/13 8:45 p.m.10 views

CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References2
Rows per page
Query Builder