CVE-2026-54691

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

EUVD-2026-50069

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

Malicious code in node-array-plus (npm)

Source: amazon-inspector e1ce58719e0587902be3a6436f329ce631317fe3a7c322d89f9c679cd6e1a744 index.js is heavily obfuscated with a 312-entry rotated string array plus RC4/base64 decoders that hide identifiers and literals. On require, the module builds a hardcoded IPv4 endpoint by concatenating four...

Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery Detection

Ignite Realtime Openfire through version 4.4.2 allows attackers to send arbitrary HTTP GET requests in FaviconServlet.java, resulting in server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """Ignite Realtime Openfire through version 4.""" from kittysploit import from...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

EasySpider 0.6.2 - Arbitrary File Read Detection

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...

WyreStorm Apollo VX20 - Information Disclosure Detection

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext credentials for the SoftAP access point Router /device/config using an HTTP GET request. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on WyreStorm Apollo VX20...

D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...

Nginx Default Test Page Detection

Detects Nginx Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nginx Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Default Test Page Detection', 'description': 'Detec...

Intelbras DVR - Unrestricted Access Detection

The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. !/usr/bin/env python3 -- coding: utf-8 -- """The HTTP GET request to /cap.""" from kittysploit import from...

Kettle Panel - Detect

Kettle panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kettle panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kettle Panel - Detect', 'description': 'Kettle panel was detected.',...

Lighttpd Config File - File Disclosure Detection

Lighttpd Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Lighttpd Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lighttpd Config File - File Disclosure Detection',...

D-Link Network Attached Storage - Backdoor Account Detection

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

Fortinet FortiMail 7.0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in FortiMail may allow an unauthenticated attacker to perform an attack via specially crafted HTTP GET requests to the FortiGuard URI protection service. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in FortiMail may allow a...

CPAS Management System - Arbitrary File Read Detection

The CPAS Audit Management System has been found to contain a vulnerability that allows arbitrary file read. This security flaw can be exploited by attackers to access sensitive files on the server, potentially exposing critical system information. The vulnerability can be triggered by sending a...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

Opsview Monitor Pro - Local File Inclusion Detection

Opsview Monitor Pro prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch is vulnerable to unauthenticated local file inclusion and can be exploited by issuing a specially crafted HTTP GET request utilizing a simple bypass...

Malicious code in pewter-constantstest (npm)

Source: amazon-inspector 050b19d8dad7c8c1a626c953493c23b375e434128f38950625f82b0fb244eabe On npm install, the preinstall script callback.js collects the installer's hostname, OS username, current working directory, npm registry configuration, and CI repository identifiers from a broad list of CI...

Malicious code in @onum-releases/utils (npm)

Source: amazon-inspector 887866a4734ebf64a639f9d2512cd400085469ec7fa06aba5f1bbe340b2688b8 On require'@onum-releases/utils', index.js reads os.hostname and issues an HTTP GET to 'utils..200majoeu01dk02xnjdajro1isojc90y.oastify.com', leaking the installer's hostname via DNS and HTTP to an out-of-ba...

Malicious code in @onum-releases/auth (npm)

Source: amazon-inspector 22d4bde1772d506f812e112fb8d6bfbf6a6f187dd823640f2cf15811f0d0633a On require'@onum-releases/auth', index.js reads os.hostname and issues an HTTP GET to auth..200majoeu01dk02xnjdajro1isojc90y.oastify.com, transmitting the installer's host identifier to a Burp Collaborator...