CVE-2026-14100

An insufficient data validation flaw was found in the NetworkCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513383891...

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

sssd security, bug fix, and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

Akamai Cache Detection

Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value. !/usr/bin/env python3 -- coding: utf-8 -- """Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific respon.""" import re...

Wpdm-Cache Session Detection

Leaked session of Wpdm Cache wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Leaked session of Wpdm Cache wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wpdm-Cache Session Detection'...

Monstra CMS 3.0.4 - HTTP Header Injection Detection

Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...

TCExam <= 14.8.1 - Sensitive Information Exposure Detection

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. !/usr/bin/env python3 -- coding: utf-8 -- """When installed following the default/recommended settings,...

WordPress W3 Total Cache - Full Path Disclosure Detection

WordPress W3 Total Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress W3 Total Cache plugin files are publicly accessible withou...

Wordpress W3C Total Cache <= 0.9.4 - Server Side Request Forgery (SSRF) Detection

The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF secu.""" from...

Gradle Develocity Build Cache Node Login Panel - Detect

Gradle Develocity Build Cache Node login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gradle Develocity Build Cache Node login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

NP Data Cache Panel - Detect

NP Data Cache panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NP Data Cache panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NP Data Cache Panel - Detect', 'description': 'NP Data...

PCDN Cache Node Dataset Detection

PCDN Cache Node dataset is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PCDN Cache Node dataset is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PCDN Cache Node Dataset Detection', 'description':...

WordPress W3 Total Cache - Cache Files Exposure Detection

Detects publicly accessible W3 Total Cache database cache files in the wp-content/w3tc/dbcache/ directory. When database caching to disk is enabled, these files contain raw SQL query results, potentially exposing sensitive data such as user details, password hashes, emails, or other database...

WordPress WP Fastest Cache Plugin - Full Path Disclosure Detection

WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected PHP files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected.""" from kittysploi...

Magento Debug Log - Exposure Detection

Detected Magento debug.log file was publicly accessible. This file contained sensitive debugging information including full server paths, stack traces, customer activity, internal code paths, cache data, and cron job details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Magento debug."""...

CVE-2026-58218

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...

UBUNTU-CVE-2026-58218

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...

USN-8619-1 linux-hwe-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

SUSE SLES16 Security Update : shibboleth-sp (SUSE-SU-2026:22854-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22854-1 advisory. This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the ID attribute of the SAML response when the...

RockyLinux 10 : unbound (RLSA-2026:36320)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36320 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...