Docker Compose - Detect

Multiple Docker Compose configuration files were detected. The configuration allows deploy, combine and configure operations on multiple containers at the same time. The default is to outsource each process to its own container, which is then publicly accessible. !/usr/bin/env python3 -- coding:...

Prometheus Config API Endpoint Discovery Detection

A Prometheus config API endpoint was discovered. The config endpoint returns the loaded Prometheus configuration file along with the addresses of targets and alerting/discovery services alongside the credentials required to access them. Usually, Prometheus replaces the passwords in the credential...

Symfony Security Configuration File - Detect

Symfony security configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony security configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symfony Security...

SaltStack Config Panel - Detect

SaltStack config panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack config panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SaltStack Config Panel - Detect', 'description':...

Rackup Configuration - Detect

Rackup configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rackup configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rackup Configuration - Detect...

Ruijie Phpinfo Configuration - Detect

Ruijie phpinfo configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie phpinfo configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie Phpinfo Configuration - Detect...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

Sensitive Storage Data - Detect

A generic search for 'storage' in sensitive key files, file names, logs, etc., returned a match. !/usr/bin/env python3 -- coding: utf-8 -- """A generic search for 'storage' in sensitive key files, file names, logs, etc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Web Configuration File - Detect

Web configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Web configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Configuration File - Detect', 'description':...

D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)

Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...

Spring Cloud Config Server - Local File Inclusion Detection

Spring Cloud Config Server versions 2.1.x prior to 2.1.2, 2.0.x prior to 2.0.4, 1.4.x prior to 1.4.6, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files. An attacker can send a request using a specially...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

PT-2026-65500

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

libssh-config-0.11.5-1.1 on GA media (moderate)

libssh-config-0.11.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11377-1 Rating: moderate Cross-References: CVE-2026-15370 CVE-2026-59843 CVE-2026-59844 CVE-2026-59845 CVE-2026-59846 CVE-2026-59847 CVE-2026-59848 CVE-2026-59849 CVE-2026-59850 CVSS scores: CVE-2026-15370 SUSE : 6.7...

PT-2026-65570

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...

Malicious Package

Overview pfa-prettier-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bcore-bravo-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview cryptodao-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview atlasora-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...