nitely/spirit 0.12.3 - Open Redirect Detection

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

OpenEMR < 7.0.1 - Cross-Site Scripting Detection

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.""" from kittysploit import from lib.protocols.http.httpclient import...

Setup GitHub Enterprise - Detect

Detects Setup GitHub Enterprise - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Setup GitHub Enterprise - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Setup GitHub Enterprise - Detect',...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2026-47427: NULL Pointer Dereference

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

PT-2026-65504

Name of the Vulnerable Software and Affected Versions GitHub MCP Server versions prior to 1.1.0 Description A nil pointer dereference occurs in the CompletionsHandler function within pkg/github/server.go when processing a completion/complete request. The issue arises because the server accesses t...

cicd-sensor rules/v20260722-001

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

CVE-2026-9830

creationtimestamp| type| source ---|---|--- 2026-07-27 21:00:03+00:00| seen| Telegram/jZonNK9LGMSvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI 2026-07-27 21:00:03+00:00| seen| Telegram/MNUQPIGpAGeGg3WQfZgMMHal6jpwzokF-mfI2PhU7te8xo 2026-07-27 21:00:03+00:00| seen| https://t.me/GithubRedTeam/95407 2026-07-2...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, seata, pinot-fips, airbyte-server-fips, keycloak, keycloak-fips, commercial-elasticsearch, strimzi-kafka-operator, pinot, request-9047-keycloak-fips, traccar, apache-hop, camunda, hono, spark-fips, druid, apicurio-registry-fips,...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: pulumi, lerna, jupyter-base-notebook, npm, thingsboard, argo-workflows, opensearch-dashboards, rancher-api-ui, saf, kubeflow-katib, serve, nextcloud-server, renovate, sqlpad, ts-patch, langfuse, prism...

ROOT-APP-NPM-GHSA-9GGV-8W38-R7PM GHSA-9ggv-8w38-r7pm in @rootio/typeorm - Patched by Root

Root has patched GHSA-9ggv-8w38-r7pm in the @rootio/typeorm package for Root:npm. Multiple fixed versions available...

PT-2026-65351

Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama...

GHSA-G35J-M5XG-VH3Q vulnerabilities

Vulnerabilities for packages: spegel, kubo, ipfs-cluster-fips, spegel-fips, rke2-runtime, ipfs-cluster, rke2-runtime-fips, k3s...

GHSA-P6PH-3JX2-3337

creationtimestamp| type| source ---|---|--- 2026-07-25 16:31:29+00:00| seen| https://gist.github.com/alon710/7ac48e75205a16d278d7edd78b6790dd 2026-10-12 18:55:14+00:00| seen| https://infosec.exchange/users/cve/statuses/117429457016187919...

CGA-6W2Q-49J7-CV62

Bulletin has no description...

GHSA-Q53C-4PRM-W95Q

creationtimestamp| type| source ---|---|--- 2026-07-25 11:31:34+00:00| seen| https://gist.github.com/alon710/7d82b3a29a466133e3b991f0cb56fd86...

GHSA-JVXP-QMX7-GJPX

creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...

GHSA-8Q49-2H5H-434X

creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21432-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21432-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...