jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

CVE-2026-94387

Aureus ERP before version 1.6.0 is affected by a stored cross-site scripting (XSS) vulnerability in the Chatter field-change log component. The root cause is that old_value and new_value entries are rendered without proper escaping in the Filament blade template. Any user permitted to edit tracke...

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

CVE-2026-94387: Improper Neutralization of Input During Web Page Generation

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

CVE-2026-73245: Missing Authentication for Critical Function

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/application.yml serves Micronaut management endpoints on port 8081 without authentication even when Basic Auth protects /api/v1/ on port 8080, allowing unauthenticated GET /env...

PT-2026-71960

Name of the Vulnerable Software and Affected Versions OutSystems Service Center versions prior to 11.41.2 OutSystems Lifetime versions prior to 11.28.2.3955 Description OutSystems Service Center is subject to a DOM-based Cross-Site Scripting XSS issue, where a low-privileged attacker can execute...

EUVD-2026-44750

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

CVE-2026-8078

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

UBUNTU-CVE-2026-8078

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2026-8078 Fix stored XSS in global settings change log

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2026-8078 Fix stored XSS in global settings change log

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2026-8078 Fix stored XSS in global settings change log

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

PT-2026-47286

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2026-8078: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

EUVD-2026-31662

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...