Tekton Dashboard Panel - Detect

Tekton Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tekton Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tekton Dashboard Panel - Detect', 'description':...

Traefik Dashboard Panel - Detect

Traefik Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Traefik Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traefik Dashboard Panel - Detect', 'description...

Fastvue Dashboard Panel - Unauthenticated Detect

Fastvue Dashboard panel was detected without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Fastvue Dashboard panel was detected without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Netdata Dashboard Panel - Detect

Netdata Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netdata Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netdata Dashboard Panel - Detect', 'description...

ZenML Dashboard Panel - Detect

Detects ZenML Dashboard Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ZenML Dashboard Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZenML Dashboard Panel - Detect',...

CVE-2026-8595

A user with Editor permissions can craft a dashboard whose table TableNG panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard stored cross-site scripting...

CVE-2026-8595

A user with Editor permissions can craft a dashboard whose table TableNG panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard stored cross-site scripting...

Malicious code in fluent-dashboard-panel-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e745c609fb43daaa93911ae2edcb05b1ffd3cec1c6ec55c321597e9e39eb153 fluentpanelmetrics/init.py defines an undocumented function bootstrapruntimeprofile and invokes it unconditionally at module top level. The function...

MAL-2026-6233 Malicious code in fluent-dashboard-panel-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e745c609fb43daaa93911ae2edcb05b1ffd3cec1c6ec55c321597e9e39eb153 fluentpanelmetrics/init.py defines an undocumented function bootstrapruntimeprofile and invokes it unconditionally at module top level. The function...

PT-2026-48498

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could store a malicious script in a classic...

Splunk Enterprise: Input Validation Error Vulnerability

Splunk Cloud Platform and Splunk Enterprise are both products of the American company Splunk. Splunk Cloud Platform is a powerful service for data collection, processing, and analysis. Splunk Enterprise is a suite of software for data collection and analysis. There is an input validation...

Stored XSS in the table panel (TableNG)

A user with Editor permissions can craft a dashboard whose table TableNG panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard stored cross-site scripting. Upgrade to a fixed version listed below...

MiracleLinux 8 : grafana-6.7.4-3.el8 (AXSA:2021-1351:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1351:01 advisory. grafana: XSS vulnerability via a column style on the Dashboard Table Panel screen CVE-2018-18624 grafana: arbitrary file read via MySQL data source...

WordPress plugin WP Sliding Login/Dashboard Panel cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-5928: Cross-Site Request Forgery (CSRF)

The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the wpslidingpaneluseroptions function. This makes it possible for unauthenticated attackers t...