CVE-2026-118019

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

EUVD-2026-110917

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

CVE-2026-118019

A race condition and use-after-free vulnerability exists in the DOM: File component of Firefox and Thunderbird . This flaw was addressed in versions 159 of both products. Documentation indicates that specific Linux distributions and packages may be impacted, with some reports noting a lack of ven...

CVE-2026-118019 Race condition, use-after-free in the DOM: File component

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 CVSS score: 8.8, is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when...

Exploit for CVE-2026-1306

CVE-2026-1306 — midi-Synth Proof-of-Concept PoC exploit...

Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE (storeTo=file: — Detect

Fingerprint / reachability check for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron""" from kittysploit import...

Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload (upload_thu — Detect

Fingerprint / reachability check for Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload uploadthumbnail !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload uploadthumbnail""" from kittysploit import from...

Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE — Detect

Fingerprint / reachability check for Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

SmartBear Collaborator Server 15.1.15101 - Path Traversal (Zip-Slip) in the DOOR — Detect

Fingerprint / reachability check for SmartBear Collaborator Server 15.1.15101 - Path Traversal Zip-Slip in the DOORS/Simulink Review-File Upload Leading to Groovy Server Page Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for SmartBear Collaborator Server 15.1.15101 - Pat...

mySCADA PRO Runtime unauthenticated upgrade command injection root RCE

POST /s.fcgi?upgrade= with X-File directory triggers systemchmod 777 /opt/myscada/fw/ as root. """mySCADA PRO Runtime unauthenticated /s.fcgi upgrade branch command injection.""" from future import annotations import re from urllib.parse import quote from kittysploit import from lib.exploit.handl...

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE """MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE""" from future import annotations from kittysploit import import base64 import os import subprocess import sys import tempfile import textwrap...

Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Han — Detect

Fingerprint / reachability check for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434""" from...

ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE — Detect

Fingerprint / reachability check for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE""" from kittysploit import from lib.protocols.http.httpclient import...

ZesleCP admin file write cron root RCE

Admin POST /file-manager/save-file writes /etc/cron.d/ as root; crond executes attacker command. !/usr/bin/env python3 -- coding: utf-8 -- """ZesleCP admin arbitrary file write to /etc/cron.d root RCE.""" from future import annotations import json import re import time from kittysploit import fro...

Accusoft / Apryse PrizmDoc for Java (VirtualViewer) 5.22.1 — Unauthenticated `up — Detect

Fingerprint / reachability check for Accusoft / Apryse PrizmDoc for Java VirtualViewer 5.22.1 — Unauthenticated uploadDocument Arbitrary File Write to JSP Webshell to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Accusoft / Apryse PrizmDoc for Java VirtualViewer 5.22.1 —...

TigerGraph Community Edition 4.2.4 — Default Hard-Coded Credentials + GSQL Arbit — Detect

Fingerprint / reachability check for TigerGraph Community Edition 4.2.4 — Default Hard-Coded Credentials + GSQL Arbitrary File Write + Unauthenticated REST++ Trigger → SSH RCE as tigergraph !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TigerGraph Community Edition 4.2.4 — Default...

Vicon Valerus unauthenticated command injection RCE

Unauthenticated POST to /NVR/api/v1/upgrades/multiformat-file-Execute/start with a JSON-encoded command string triggers OS command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Vicon Valerus unauthenticated command injection RCE.""" from future import annotations import json import re...

LCDS Laquis SCADA — Unauthenticated `/uploade.html` File Write + Startup `CMDEXT — Detect

Fingerprint / reachability check for The web/HMI component of LCDS Laquis SCADA, mili.exe PE32 Delphi console, 1129984 bytes, listening on 0.0.0.0:11234 per var.ini MODE PORT=11234, plus Modbus TCP on 0.0.0.0:502, routes roug !/usr/bin/env python3 -- coding: utf-8 -- """Detection for LCDS Laquis...

FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem — Detect

Fingerprint / reachability check for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem !/usr/bin/env python3 -- coding: utf-8 -- """Detection for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem""" from kittysploit import from lib.protocols.http.httpclie...