Technicolor TC7200 Password Disclosure V2

Module exploits Technicolor TC7200 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Technicolor TC7200 Password Disclosure V2""" import re import struct from kittysploit import from lib.protocols.http.httpclient import...

Netwave IP Camera Information Disclosure

This exploit will try to retrieve WPA password and ddns host name, Also it would try to read memory leak in order to find username and password !/usr/bin/env python3 -- coding: utf-8 -- """Netwave IP Camera Information Disclosure""" import re from kittysploit import from...

Thomson TWG849 Info Disclosure

Module exploits Thomson TWG849 information disclosure vulnerability which allows reading sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Thomson TWG849 Info Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Thomson TWG850 Password Disclosure

Module exploits Thomson TWG850 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Thomson TWG850 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Billion 7700NR4 Password Disclosure

Exploits Billion 7700NR4 password disclosure vulnerability that allows to fetch credentials for admin account. !/usr/bin/env python3 -- coding: utf-8 -- """Billion 7700NR4 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Asus RT-N16 Password Disclosure

Module exploits password disclosure vulnerability in Asus RT-N16 devices that allows to fetch credentials for the device. !/usr/bin/env python3 -- coding: utf-8 -- """Asus RT-N16 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Technicolor TC7200 Password Disclosure

Module exploits Technicolor TC7200 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Technicolor TC7200 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Brickcom Corp Network Camera Conf Disclosure

Module exploits Brickcom Corporation Network Camera Configuration Dislosure vulnerability. If target is vulnerable it is possible to read device configuration including administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Brickcom Corp Network Camera Conf Disclosure""" import ...

Huawei HG530 & HG520b Password Disclosure

Module exploits password disclosure vulnerability in Huawei HG530 and HG520b devices. If the target is vulnerable it allows to read credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG530 & HG520b Password Disclosure""" import re from kittysploit import from...

D-Link DIR-300 & DIR-320 & DIR-600 & DIR-615 Info Disclosure

Module explois information disclosure vulnerability in D-Link DIR-300, DIR-320, DIR-600,DIR-615 devices. It is possible to retrieve sensitive information such as credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-300 & DIR-320 & DIR-600 & DIR-615 Info Disclosure""" import re fro...

D-Link DIR-8XX Password Disclosure

Module exploits D-Link DIR-8XX password disclosure vulnerability, which allows retrieving administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-8XX Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DIR-850L Creds Disclosure

Module exploits D-Link DIR-850L credentials disclosure vulnerability, which allows retrieving administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-850L Creds Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DIR-645 Password Disclosure

Module exploits D-Link DIR-645 password disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-645 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = 'name': 'D-Link...

Honeywell IP-Camera HICC-1100PT Password Disclosure

Module exploits Honeywell IP-Camera HICC-1100PT Password Dislosure vulnerability. If target is vulnerable it is possible to read administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP-Camera HICC-1100PT Password Disclosure""" import re from kittysploit import from...

PT-2026-78732

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with a role possessing the rest properties get...

PT-2026-78766

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Insufficient input validation in the geostats command allow...

CVE-2026-71960: Use of Hard-coded Credentials

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

PT-2026-78819

🚨 CVE-2026-76392 In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores...

CVE-2026-76392: Use of Hard-coded Credentials

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores credentials for...

CVE-2026-76376: Cleartext Storage of Sensitive Information

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...