3Com OfficeConnect Info Disclosure

Exploits 3Com OfficeConnect information disclosure vulnerability. If the target is vulnerable it is possible to read sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """3Com OfficeConnect Info Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient impor...

Thomson TWG850 Password Disclosure

Module exploits Thomson TWG850 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Thomson TWG850 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Mikrotik WinBox Auth Bypass - Creds Disclosure

Module bypass authentication through WinBox service in Mikrotik devices versions from 6.29 release date: 2015/28/05 to 6.42 release date 2018/04/20 and retrieves administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Mikrotik WinBox Auth Bypass - Creds Disclosure""" import re fr...

Cisco UCM Info Disclosure

Module exploits information disclosure vulnerability in Cisco UCM devices. If the target is vulnerable it is possible to read sensitive information through TFTP service. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco UCM Info Disclosure""" import re from kittysploit import from...

Netwave IP Camera Information Disclosure

This exploit will try to retrieve WPA password and ddns host name, Also it would try to read memory leak in order to find username and password !/usr/bin/env python3 -- coding: utf-8 -- """Netwave IP Camera Information Disclosure""" import re from kittysploit import from...

D-Link DIR-300 & DIR-320 & DIR-600 & DIR-615 Info Disclosure

Module explois information disclosure vulnerability in D-Link DIR-300, DIR-320, DIR-600,DIR-615 devices. It is possible to retrieve sensitive information such as credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-300 & DIR-320 & DIR-600 & DIR-615 Info Disclosure""" import re fro...

Belkin G & N150 Password Disclosure

Module exploits Belkin G and N150 Password MD5 Disclosure vulnerability which allows fetching administration's password in md5 format !/usr/bin/env python3 -- coding: utf-8 -- """Belkin G & N150 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import...

Belkin G Info Disclosure

Module exploits Belkin Wireless G Plus MIMO Router F5D9230-4 information disclosure vulnerability which allows fetching sensitive information such as credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Belkin G Info Disclosure""" import re from kittysploit import from...

SIEMENS IP-Camera CCMS2025 Password Disclosure

Module exploits SIEMENS IP-Camera CCMS2025 Password Dislosure vulnerability. If target is vulnerable it is possible to read administrative credentials !/usr/bin/env python3 -- coding: utf-8 -- """SIEMENS IP-Camera CCMS2025 Password Disclosure""" import re from kittysploit import from...

Honeywell IP-Camera HICC-1100PT Password Disclosure

Module exploits Honeywell IP-Camera HICC-1100PT Password Dislosure vulnerability. If target is vulnerable it is possible to read administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP-Camera HICC-1100PT Password Disclosure""" import re from kittysploit import from...

Cisco DPC2420 Info Disclosure

Module exploits Cisco DPC2420 information disclosure vulnerability which allows reading sensitive information from the configuration file. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco DPC2420 Info Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import...

Huawei HG866 Password Change

Module exploits password change vulnerability in Huawei HG866 devices. If the target is vulnerable it allows to change administration password. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG866 Password Change""" import re from kittysploit import from lib.protocols.http.httpclient import...

3Com IMC Info Disclosure

Exploits 3Com Intelligent Management Center information disclosure vulnerability that allows to fetch credentials for SQL sa account !/usr/bin/env python3 -- coding: utf-8 -- """3Com IMC Info Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

CVE-2026-76260: Incorrect Permission Assignment for Critical Resource

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the restpropertiesget capability could read encrypted stored credentials through the Representational State Transfer REST API. Successful exploitation can expose relevant data protected by the...

CVE-2026-20359: Insufficiently Protected Credentials

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-75920: Insecure Temporary File

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin...

PT-2026-78732

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with a role possessing the rest properties get...

PT-2026-78766

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Insufficient input validation in the geostats command allow...

CVE-2026-76376: Cleartext Storage of Sensitive Information

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...

Content Credentials SDK Insufficient Validation Privilege Escalation

The vulnerability of Content Credentials SDK library libraries is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...