Azure Blob File Sampler

Sample high-value blob files by extension/name and rank by likely sensitivity. from kittysploit import import json import re from urllib.parse import urlparse import xml.etree.ElementTree as ET from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name":...

Azure Blob Sensitive Pattern Scan

List and scan exposed blob files for sensitive patterns keys, secrets, credentials. from kittysploit import import json import re import time from urllib.parse import urlparse import xml.etree.ElementTree as ET from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient...

Azure Blob Exposure Audit

Audit multiple Azure blob containers for anonymous exposure and listing. from kittysploit import import json from urllib.parse import urlparse from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "Azure Blob Exposure Audit", "author": "KittySploit...

Azure Exposure Path Prioritizer

Correlate Azure blob findings into prioritized exposure-to-impact paths. from kittysploit import import json import re from urllib.parse import urlparse import xml.etree.ElementTree as ET from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = "name": "Azure...

Terraform State Exposure Detector

Passive detection of Terraform state exposure indicators: tfstate paths/URLs, remote backends S3, GCS, Azure, HTTP, Consul, Terraform Cloud, and bucket or state file names in fetched text. from kittysploit import import json import re from urllib.parse import urlparse from...

GHSA-PRGG-RGFW-VR94 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-vmware, linux-aws, linux-azure...

CVE-2026-23442 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-vmware, linux-aws, linux-azure...

GHSA-4625-4J76-FWW9 vulnerabilities

Vulnerabilities for packages: promitor, azure-functions-host...

CVE-2026-42191 vulnerabilities

Vulnerabilities for packages: promitor, azure-functions-host...

Exploit for CVE-2026-31431

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — algifaead Remediator...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: SNYK:JAVA-ORGJENKINSCIPLUGINS-16322871...

Exploit for Improper Neutralization of Special Elements in Data Query Logic in Pab1It0 Azure_Data_Explorer_Mcp_Server

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablenam...

GHSA-VC24-J8C5-2VW4 OpenTelemetry.Resources.Azure has an unbounded HTTP response body read

Summary OpenTelemetry.Resources.Azure reads unbounded HTTP response bodies from the Azure VM remote instance metadata service endpoint into memory. This would allow an attacker-controlled endpoint or one acting as a Man-in-the-Middle MitM to cause excessive memory allocation and possible process...

Allocation of Resources Without Limits or Throttling

Overview OpenTelemetry.Resources.Azure is a package contains Resource Detectors for applications running in Azure environment. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the AzureVmMetaDataRequestor in the Azure resource metada...

OpenTelemetry.Resources.Azure has an unbounded HTTP response body read

Summary OpenTelemetry.Resources.Azure reads unbounded HTTP response bodies from the Azure VM remote instance metadata service endpoint into memory. This would allow an attacker-controlled endpoint or one acting as a Man-in-the-Middle MitM to cause excessive memory allocation and possible process...

Open Redirect

Overview org.jenkins-ci.plugins:azure-ad is a Jenkins Plugin that supports authentication & authorization via Azure Active Directory. Affected versions of this package are vulnerable to Open Redirect via the redirect URL parameter after authentication. An attacker can redirect users to malicious...

OPENSUSE-SU-2026:20654-1 Security update for grafana

This update for grafana fixes the following issues: Changes in grafana: - Update to version 11.6.11: Features and enhancements: Alerting: Add limits for the size of expanded notification templates Correlations: Remove support for orgid=0 Security: CVE-2026-21722: Public dashboards annotations: us...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: GHSA-JP9R-MMHW-VFF3...

com.synopsys.jenkinsci:ownership (>=365.v2cc1889ec61d, <=373.vb_41d439617c2), org.jenkins-ci.plugins:azure-ad (>=378.vd6e2874a_69eb, <=678.vf350db_9b_563a) +2 more potentially affected by CVE-2026-42521 via org.jenkins-ci.plugins:matrix-auth (>=3.1.5, <=3.2.9)

org.jenkins-ci.plugins:matrix-auth MAVEN version =3.1.5, =365.v2cc1889ec61d, =378.vd6e2874a69eb, =2.1.0, =1.1.0.227.v27e08dfb1a20, =1.1.0.263.v2e0ddecf8b25 Source cves: CVE-2026-42521 Source advisory: OSV:GHSA-JP9R-MMHW-VFF3...

io.jenkins.plugins:artifactory-artifact-manager (>=318.v89d9642e6690, <=320.v6d1b_a_84b_16db), org.csanchez.jenkins.plugins:kubernetes (>=4467.vf26561292824, <=4560.vc25b_83890c34) +1 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (719.v80e905ef14eb)

org.jenkins-ci.plugins:credentials-binding MAVEN version 719.v80e905ef14eb is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.plugins:artifactory-artifact-manager...