EUVD-2026-49782

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-41874

CVE-2026-41874 affects Quick.Cart; hard-coded, plaintext admin credentials stored in a configuration file allow local access to credentials when an attacker can access the server filesystem, potentially enabling privilege escalation. Only version 6.7 was tested; all versions are considered vulner...

Zabbix Setup Configuration Authentication Bypass Detection

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators but also by unauthenticated users. A malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend. !/usr/bin/env python3 -- coding: utf-8 -- """After th...

BitKeeper Configuration - Detect

BitKeeper configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BitKeeper configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BitKeeper Configuration - Detect', 'description...

FastCGI Configuration - File Disclosure Detection

FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import fro...

Frigate NVR - API Exposure Detection

Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal network configuration, and MQTT credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal...

Remote Spark Gateway Configuration/Credentials - Exposure Detection

Remote Spark Gateway config found via /gateway.conf. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Spark Gateway config found via /gateway.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Remote Spark...

FeiYuXing Enterprise Router - Information Leakage Detection

The FeiYuXing Enterprise Router Information Leakage Vulnerability is a critical flaw that allows unauthorized attackers to retrieve sensitive configuration details from the router. !/usr/bin/env python3 -- coding: utf-8 -- """The FeiYuXing Enterprise Router Information Leakage Vulnerability is a...

Apache htpasswd Config - Detect

Apache htpasswd configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache htpasswd configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache htpasswd Config - Detect',...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Brickcom Camera - Default Login Detection

Detected Brickcom IP cameras accessible using default credentials admin/admin. Successful authentication exposed full camera configuration, live video streams, LED control, and network settings to remote attackers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras accessib...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Planning Analytics versions 2.""" fr...

Behat Configuration File - Detect

Behat configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Behat configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Behat Configuration File - Detect',...

CakePHP Configuration File - Detect

CakePHP configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CakePHP configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CakePHP Configuration File - Detect',...

CodeClimate Configuration File - Exposure Detection

Detected CodeClimate configuration file, exposing code quality settings and excluded paths. !/usr/bin/env python3 -- coding: utf-8 -- """Detected CodeClimate configuration file, exposing code quality settings and excluded paths.""" from kittysploit import from lib.protocols.http.httpclient import...

Netgear R6850 - Information Disclosure Detection

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

AWS Configuration - Detect

AWS config found via /.aws/config. !/usr/bin/env python3 -- coding: utf-8 -- """AWS config found via /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Configuration - Detect', 'description': 'AWS confi...

cPanel Configuration - File Disclosure Detection

cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import from...

Cypress Oxygen Configuration Page - Detect

Cypress Oxygen configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cypress Oxygen configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cypress Oxygen Configuratio...