Remita Merchant ID & API Key - Exposure Detection

Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuration files, or publicly accessible assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuratio...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

Vercel Source Code Exposure Detection

The Vercel Source Code Exposure misconfiguration allows an attacker to access sensitive source code files on the Vercel platform. !/usr/bin/env python3 -- coding: utf-8 -- """The Vercel Source Code Exposure misconfiguration allows an attacker to access sensitive source code files on t.""" from...

WordPress Plugin WP Content Source Control - Directory Traversal Detection

A directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. !/usr/bin/env python3...

Rstudio Shiny Server <1.5.16 - Local File Inclusion Detection

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """Rstudio Shiny Server prior to 1.""" import re from kittysploit import from...

Astro - Information Disclosure Detection

Astro versions v5.0.3 through v5.0.7 and Astro v4.16.17 or older with sourcemaps enabled contain a source code disclosure caused by sourcemap files being publicly accessible in the build output folder, letting unauthenticated users read server source code, exploit requires sourcemaps to be enable...

Drupal - Source Code Disclosure Detection

Detected exposed Drupal source code, backup files, and sensitive configurations, potentially disclosing database credentials and API keys. This exposure revealed internal system paths and critical site metadata, increasing the risk of full system compromise. !/usr/bin/env python3 -- coding: utf-8...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

React / Vite Dev Server Exposure Detection

Detects development-mode React tooling left reachable Vite client, React Refresh, webpack HMR / sockjs which often leaks source and enables SSRF. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React/Vite/webpack development servers exposed to the network.""" from kittysploit import from...

Vugex Framework Source Code - Detect

Detects the presence of exposed Vugex Framework source code by identifying common files and directories associated with the framework. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of exposed Vugex Framework source code by identifying common files and directories associ."""...

WordPress Data Source for Contact Form 7 - Full Path Disclosure Detection

WordPress Plugin CData Source for Contact Form 7 files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CData Source for Contact Form 7...

Sonicwall - Pre-Authentication Arbitrary File Read Detection

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

CVE-2023-3349

creationtimestamp| type| source ---|---|--- 2026-07-28 11:24:32+00:00| seen| https://bsky.app/profile/r-redteamsec.bsky.social/post/3mrpcemldno2q 2026-09-01 20:00:06+00:00| seen| https://t.me/hackingAttack/190060 2026-09-02 01:00:24+00:00| published-proof-of-concept|...

CVE-2026-5326

creationtimestamp| type| source ---|---|--- 2026-07-28 11:02:01+00:00| seen| https://gist.github.com/alon710/7412d8adaff2427de50f99e5817de762...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libXpm: libXpm-3.5.19-4.hum1 aarch64, x8664 libXpm-devel-3.5.19-4.hum1 aarch64, x8664 libXpm-3.5.19-4.hum1.src src Security Fixes: libXpm: CVE-2026-4367...

CVE-2026-16462

creationtimestamp| type| source ---|---|--- 2026-07-28 09:29:06+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp3vuzo4l42 2026-07-28 11:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdnn7ydg23 2026-07-28 15:26:06+00:00| seen|...

CVE-2026-14171

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcmdrf4p2a...

CVE-2026-14169

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdebf67v27...

CVE-2026-14168

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:50:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdszb2gz23...