Lucene search
+L

6888 matches found

Kitploit
Kitploit
added 2026/09/09 5:10 a.m.33 views

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 4:36 a.m.12 views

brave-browser

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/09 12:14 a.m.6 views

content

Welcome! The purpose of this project is to create security policy content for various platforms — Red Hat Enterprise Linux , Fedora , Ubuntu , Debian , SUSE Linux Enterprise Server SLES ,... — as well as products — Firefox ,... We aim to make it as easy as possible to write new and maintain...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/08 11:06 p.m.7 views

zappzarapp-php-security

⚡ zappzarapp/security Biblioteca integral de seguridad para PHP que proporciona CSP, cabeceras de seguridad, protección CSRF, cookies seguras, validación de contraseñas, saneamiento de entradas, limitación de velocidad, SRI, carga de secretos, cifrado, seguridad de sesiones, autenticación de dos...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/08 9:23 p.m.61 views

scorecard

OpenSSF Scorecard...

5.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/08 5:37 p.m.5 views

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

CVE-2026-21018 – OPC UA Authentication Bypass via None Security Policy Program Code Python opcua-asyncio sim root@kitploit: opcuaserversim.py - OPC UA server accepting None security policy from asyncua import Server import asyncio async def main: server = Server await server.init...

6.8CVSS6.9AI score0.00155EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 2:28 p.m.6 views

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk es una prueba de concepto no mantenida ni mejorada activamente imagen de arranque con el cargador de arranque GRUB2 diseñada para ser utilizada como base para unidades flash USB de recuperación. Característica clave: el disco es completament...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 12:52 p.m.265 views

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 10:32 a.m.13 views

cspparse

cspparse Descripción cspparse es una herramienta para evaluar Políticas de Seguridad de Contenido. Utiliza la API de Google para recuperar las cabeceras CSP y las devuelve en formato ReconJSON. No solo comprueba las cabeceras con la API de Google, sino que también analiza el HTML del sitio objeti...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:14 a.m.6 views

CVE-2026-54477

CVE-2026-54477: Admin Panel Missing Security Headers clickjacking / XSS Advisory Field| Value ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

5.4CVSS5.9AI score0.00327EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:12 a.m.7 views

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 9:20 a.m.8 views

fides

Securing AI Agents with Information-Flow Control This repository contains a Jupyter notebook to accompany the academic paper "Securing AI Agents with Information-Flow Control". The notebook is structured as a tutorial to walk readers through the concepts introduced in the paper. This illustrates ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 12:39 p.m.7 views

CPSC253_CybersecurityFinalProjectReports

Introducción Estos documentos fueron parte de mi proyecto final para mi clase de Ciberseguridad: CPSC 253 - Fundamentos y Principios de Ciberseguridad La premisa de mi proyecto final era que era un consultor recién contratado en un centro de investigación y ayudé a optimizar su seguridad alrededo...

7.5CVSS7.7AI score0.84225EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 11:06 a.m.7 views

CSPBypass

CSP Bypass Welcome to CSPBypass.com , a tool designed to help ethical hackers bypass restrictive Content Security Policies CSP and exploit XSS Cross-Site Scripting vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains. Website Visit CSPBypass.co...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:41 a.m.8 views

CVE-2020-6519

This was originally published on PerimeterX company's official Github through my work Github account. Eventhough this is my work - all rights and legal concerns belong to PerimeterX company. Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-2020-6519 Exploit DB Technical Article as to the...

6.5CVSS6.9AI score0.1132EPSS
SaveExploits5References2
EUVD
EUVD
added 2026/09/02 9:41 p.m.16 views

EUVD-2026-62535

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter CVE-2026-44738 bypass...

6.5CVSS5.9AI score0.00321EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 11:54 a.m.7 views

CVE-2020-6519

Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-2020-6519 Technical Article POC as reported to the chromium project...

6.5CVSS7AI score0.1132EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/02 10:26 a.m.8 views

CVE-2019-14287-IT18030372-

CVE-2019-14287-IT18030372- Sudo Security Policy bypass Vulnerability...

9CVSS7.4AI score0.63764EPSS
SaveExploits12
NVD
NVD
added 2026/08/31 8:17 a.m.8 views

CVE-2026-82838

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

6.4CVSS0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 7:44 a.m.23 views

CVE-2026-82838

Venueless 's default Docker image had a vulnerability where uploaded SVG files could be served with executable JavaScript content, potentially allowing stored XSS. The root cause was the absence of a proper Content Security Policy (CSP) in the image's default configuration. The fix sets a valid C...

6.4CVSS5.8AI score0.00234EPSS
SaveExploits0References1
Rows per page
Query Builder