CVE-2026-45293

WordPress Coding Standards (WordPressCS) contains a vulnerability in the WordPress.WP.EnqueuedResourceParameters sniff. From 0.14.1 to 3.4.1, the sniff reconstructed the $ver argument passed to functions like wp_enqueue_script() and ran it through eval() inside is_falsy(), so a crafted argument s...

CVE-2026-45293

WordPress Coding Standards is a set of PHPCodeSniffer rules sniffs that enforce WordPress coding conventions. From 0.14.1 until 3.4.1, the WordPress.WP.EnqueuedResourceParameters sniff active in the WordPress and WordPress-Extra rulesets reconstructed the $ver argument passed to functions such as...

CVE-2026-45293

WordPress Coding Standards is a set of PHPCodeSniffer rules sniffs that enforce WordPress coding conventions. From 0.14.1 until 3.4.1, the WordPress.WP.EnqueuedResourceParameters sniff active in the WordPress and WordPress-Extra rulesets reconstructed the $ver argument passed to functions such as...

MAL-2026-11120 Malicious code in @ai_/autoprefixers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bffb6e00dd7cc6edb63e3890139943019f9fa0868440ecc46cb61482416bc3d @ai/[email protected] is a typosquat of the popular 'autoprefixer' package. On require/import of the main entry, the module base64-decodes the stri...

Malicious code in @ai_/autoprefixers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bffb6e00dd7cc6edb63e3890139943019f9fa0868440ecc46cb61482416bc3d @ai/[email protected] is a typosquat of the popular 'autoprefixer' package. On require/import of the main entry, the module base64-decodes the stri...

Apache Struts 2 - Remote Command Execution Detection

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

Jupyter Notebook - Remote Command Execution Detection

Jupyter Notebook is an interactive Notebook, computer application is a web based visualization, Jupyter Notebook API/terminals path there are loopholes in the remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter Notebook is an interactive Notebook, computer application i...

Inspur Clusterengine V4 SYSshell - Remote Command Execution Detection

Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design. !/usr/bin/env python3 -- coding: utf-8 -- """Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design.""" import re from kittysploit import from lib.protocols.http.httpclient...

ECSIMAGING PACS <= 6.21.5 - Command Execution and Local File Inclusion Detection

ECSIMAGING PACS Application 6.21.5 and below suffer from a command injection vulnerability and a local file include vulnerability. The 'file' parameter on the page /showfile.php can be exploited to perform command execution or local file inclusion. Often on ECSIMAGING PACS, the www-data user has...

MajorDoMo thumb.php - OS Command Injection Detection

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. !/usr/bin/env python3 -- coding: utf-8 -- """MajorDoMo aka Major Domestic Module before 0662e5e allows command execution v...

Vanna - SQL injection Detection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

DATAGERRY - REST API Auth Bypass Detection

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect access control in BECN DATAGERRY v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Ruijie RG-EG - Remote Code Execution Detection

Ruijie RG-EG easy gateway WEB management system front-end RCE has a command execution vulnerability. An attacker without identity authentication can execute arbitrary commands to control server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie RG-EG easy gateway WEB management syst...

Sangfor Application Login - Remote Command Execution Detection

Sangfor application delivery management system login has a remote command execution vulnerability, through which an attacker can obtain server privileges and execute arbitrary commands !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor application delivery management system login has a remote...

SAP NetWeaver - Backdoor Detection

Detected a potential backdoor in SAP NetWeaver allowing unauthorized command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a potential backdoor in SAP NetWeaver allowing unauthorized command execution.""" from kittysploit import from lib.protocols.http.httpclient import...

Ruijie EG Easy Gateway - Remote Command Execution Detection

Ruijie EG Easy Gateway login.php has remote commmand execution vulnerability, which can lead to the disclosure of administrator account and password. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie EG Easy Gateway login.""" from kittysploit import from lib.protocols.http.httpclient import...

Apache Struts - OGNL Console Detection

This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution.""" from kittysploit import fr...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution Detection

nginxWebUI’s runCmd feature and is caused by incomplete validation of user input. Attackers can exploit the vulnerability by crafting malicious data to execute arbitrary commands on a vulnerable server without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """nginxWebUI’s runCmd feature...