PT-2026-68104

Name of the Vulnerable Software and Affected Versions DjangoCRM affected versions not specified Description The software contains a hardcoded SECRET KEY within the webcrm/settings.py file instead of retrieving it from an environment variable. This key is critical for session signing, CSRF token...

flask-security-audit

Flask Web Application Security Audit A hands-on penetration t...

Cross-site Scripting (XSS)

Overview @adonisjs/http-server is an AdonisJS HTTP server with support packed with Routing and Cookies Affected versions of this package are vulnerable to Cross-site Scripting XSS through the default HTML error rendering in ExceptionHandler.handle. An attacker can execute arbitrary JavaScript in ...

CVE-2026-61526 AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

CVE-2026-61526 AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

Symfony Profiler - Remote Access via Injected Arguments Detection

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

Apache Struts setup in Debug-Mode Detection

Apache Struts debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts setup in Debug-Mode Detection',...

Bottle debug mode enabled Detection

Detects Bottle debug mode enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Bottle debug mode enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bottle debug mode enabled Detection', 'description':...

TYPO3 Debug Mode Enabled Detection

TYPO3 Debug Mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """TYPO3 Debug Mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TYPO3 Debug Mode Enabled Detection', 'description': 'TYPO3 Debug...

Detect Jenkins in Debug Mode with Stack Traces Enabled

Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack traces are enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Module identified that the affected host is running an instance of Jenkins in debug mode, as a result stack tr.""" from...

Laravel Ignition - Cross-Site Scripting Detection

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import...

ImageMagick: Information Disclosure when printing profiles with debug enabled

When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-56375: possible memory leak in ASHLAR coder when action fails bsc1271495. CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title bsc1271496. CVE-2026-61859: policy bypass in script operation due to missing chec...

CodeAlpha_SecureCodingReview

CodeAlphaSecureCodingReview Cyber Security Internship — Co...

CVE-2026-8169

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

CVE-2026-8169

CVE-2026-8169 concerns ExtremeXOS (EXOS) where the privileged debug-mode access relies on a challenge-response mechanism. The challenge is generated from an insufficiently random source, allowing, under certain conditions, an attacker to predict the expected response and activate debug-mode witho...

CVE-2026-8169 ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

CVE-2026-8169

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

CVE-2026-8169 ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

PT-2026-61669

Name of the Vulnerable Software and Affected Versions ExtremeXOS EXOS affected versions not specified Description ExtremeXOS EXOS employs a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random sourc...