CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

MAL-2026-11124 Malicious code in api-node-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8133fdea40df12d51091c8ce094062f366f0c30be0d17667a827ed00b75f78a On npm install, the package's postinstall hook node test.js executes an attacker-controlled workflow against the installer's host. It recursively sca...

EUVD-2026-49845

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922

Pivotick CVE-2026-66922 affects the tree-layout and cycle-detection code by using plain JavaScript objects as lookup tables indexed with node identifiers that can collide with Object.prototype properties (e.g., constructor, toString, proto ). This can cause inherited-property confusion, wrong typ...

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

OffsetInspect v3.3.0

OffsetInspect A bounded-memory PowerShell toolkit for byte-offset inspection, source correlation, binary comparison, and defensive detection-boundary analysis. OffsetInspect answers a practical analyst question: What content is present at this byte offset, and what source or binary context...

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

EUVD-2026-49768

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

Oracle Fusion Middleware - Detect

Oracle Fusion Middleware was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Fusion Middleware was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Fusion Middleware - Detect',...

Zyxel VMG1312-B10D - Login Detection

Detects Zyxel VMG1312-B10D - Login Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Zyxel VMG1312-B10D - Login Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zyxel VMG1312-B10D - Login...

Maian Cart Detection

Detects Maian Cart Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Maian Cart Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'Maian Cart...

Pagespeed Detection

Detects Pagespeed Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pagespeed Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pagespeed Detection', 'description': 'Detects Pagespeed...

UniGUI Framework - Detect

Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version.""" import re from kittysploit import...

Mixed Active Content Detection

This check detects if there are any active content loaded over HTTP instead of HTTPS. !/usr/bin/env python3 -- coding: utf-8 -- """This check detects if there are any active content loaded over HTTP instead of HTTPS.""" import re from kittysploit import from lib.protocols.http.httpclient import...

AEM Finder Detection

Detects AEM Finder. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM Finder.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM Finder Detection', 'description': 'Detects AEM Finder.', 'author': 'KittySploit...

Google frontend HttpServer Detection

Detects Google frontend HttpServer. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google frontend HttpServer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google frontend HttpServer Detection', 'description...