Exploit for Type Confusion in Apple Ipados

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...

Game-Theoretic Modeling of Stealthy Intrusion Defense against MDP-Based Attackers

The rapid expansion of Internet use has increased system exposure to cyber threats, with advanced persistent threats APTs being especially challenging due to their stealth, prolonged duration, and multi-stage attacks targeting high-value assets. In this study, we model APT evolution as a strategi...

Multiple Cisco Products Snort 3 Visual Basic for Applications DoS Vulnerabilities (cisco-sa-ftd-snort3-vbavuls-96UcVVed_CVE-2026-20053_CVE-2026-20054_CVE-2026-20057)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This...

Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-multi-dos-XFWkWSwz_CVE-2026-20068)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in ...

📄 WatchGuard IKEv2 Detection Scanner

This Metasploit module checks for potential vulnerability to CVE-2022-23176 in WatchGuard Firmware IKEv2 service by analyzing malformed IKESAINIT responses. ============================================================================================================================================...

📄 Router Fingerprint / Command Injection Scanner

This Metasploit module targets multiple IoT routers by automatically fingerprinting the device vendor and attempting to exploit command injection vulnerabilities. The module sends an HTTP request to identify the router manufacturer by analyzing response headers and page content. Once the vendor i...

PT-2026-24463

Name of the Vulnerable Software and Affected Versions file-type versions prior to 21.3.1 Description A denial of service issue exists in the ASF WMV/WMA file type detection parser within file-type. When processing a specially crafted input where an ASF sub-header has a size field of zero, the...

ProvAgent: Threat Detection Based on Identity-Behavior Binding and Multi-Agent Collaborative Attack Investigation

Advanced Persistent Threats APTs pose critical challenges to modern cybersecurity due to their multi-stage and stealthy nature. While provenance-based detection approaches show promise in capturing causal attack semantics, current threat provenance practices face two paradoxical issues: 1 expert...

Multiple Cisco Products Snort 3 Visual Basic for Applications DoS Vulnerabilities (cisco-sa-ftd-snort3-vbavuls-96UcVVed_CVE-2026-20058)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilitie...

📄 Web‑Check 1 Command Injection

A command injection vulnerability was identified in the Web‑Check application's /api/screenshot endpoint. The issue stems from the backend function that spawns a Chromium screenshot process using childprocess.exec with user‑controlled input passed via the url query parameter. Because the input wa...

Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-multi-dos-XFWkWSwz_CVE-2026-20067)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in ...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2026-1254)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2026-1255)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...

PFCP UDP detection

Detects PFCP port 8805 5G N4 - SMF/UPF control plane. !/usr/bin/env python3 -- coding: utf-8 -- """Détection PFCP UDP 8805 - 5G N4 interface SMF-UPF.""" import socket from kittysploit import from core.framework.option import OptPort from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient...

Diameter port detection

Detects open Diameter port 3868 - 3GPP LTE/5G S6a/S6d, authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Détection port Diameter 3GPP LTE/5G - authentification, abonnés.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class...

Swagger/OpenAPI detection

Detects exposed Swagger or OpenAPI documentation API disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Détection Swagger / OpenAPI exposé.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient PATHS = "/swagger", "/swagger/", "/swagger.json", "/swagger.yaml",...

Server banner detection

Detects revealing Server or X-Powered-By headers version disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Détection bannières serveur / versions exposées.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Serve...

AWS S3 bucket detection

Detects S3 bucket or S3-style API ListBucketResult, NoSuchKey, AccessDenied XML. !/usr/bin/env python3 -- coding: utf-8 -- """Détection bucket S3 / API S3 exposée.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AWS ...

Cloud metadata path detection

Detects HTTP paths that may expose cloud metadata AWS/Azure/GCP/OpenStack. !/usr/bin/env python3 -- coding: utf-8 -- """Détection chemins métadonnées cloud risque SSRF / proxy vers metadata.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient Paths often proxied to clo...