CVE-2026-69082: Cross-Site Request Forgery (CSRF)

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...

CVE-2026-18736: Server-Side Request Forgery (SSRF)

Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public...

CVE-2026-54691

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

EUVD-2026-50069

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

CVE-2026-54691

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

Fortinet FortiMail 7.0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in FortiMail may allow an unauthenticated attacker to perform an attack via specially crafted HTTP GET requests to the FortiGuard URI protection service. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in FortiMail may allow a...

Nginx Default Test Page Detection

Detects Nginx Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nginx Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Default Test Page Detection', 'description': 'Detec...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

EasySpider 0.6.2 - Arbitrary File Read Detection

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...

Intelbras DVR - Unrestricted Access Detection

The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. !/usr/bin/env python3 -- coding: utf-8 -- """The HTTP GET request to /cap.""" from kittysploit import from...

D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...

CPAS Management System - Arbitrary File Read Detection

The CPAS Audit Management System has been found to contain a vulnerability that allows arbitrary file read. This security flaw can be exploited by attackers to access sensitive files on the server, potentially exposing critical system information. The vulnerability can be triggered by sending a...

Opsview Monitor Pro - Local File Inclusion Detection

Opsview Monitor Pro prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch is vulnerable to unauthenticated local file inclusion and can be exploited by issuing a specially crafted HTTP GET request utilizing a simple bypass...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery Detection

Ignite Realtime Openfire through version 4.4.2 allows attackers to send arbitrary HTTP GET requests in FaviconServlet.java, resulting in server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """Ignite Realtime Openfire through version 4.""" from kittysploit import from...

WyreStorm Apollo VX20 - Information Disclosure Detection

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext credentials for the SoftAP access point Router /device/config using an HTTP GET request. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on WyreStorm Apollo VX20...

Kettle Panel - Detect

Kettle panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kettle panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kettle Panel - Detect', 'description': 'Kettle panel was detected.',...

D-Link Network Attached Storage - Backdoor Account Detection

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

Lighttpd Config File - File Disclosure Detection

Lighttpd Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lighttpd Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lighttpd Config File - File Disclosure Detection',...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the Open function, which uses raw http.Get and os.Open without proper host or scheme validation. An attacker can access internal network resources, cloud metadata endpoints, or read arbitrary local...