CVE-2026-2390

creationtimestamp| type| source ---|---|--- 2026-09-08 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3muywsdbhho22...

Malicious code in svelte-insight-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b58dbba652e648d3f172a1b9ceffe28679dbae47aaeb8b29eed4ac964556f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14496 Malicious code in svelte-insight-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b58dbba652e648d3f172a1b9ceffe28679dbae47aaeb8b29eed4ac964556f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview svelte-insight-streaks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-13176

creationtimestamp| type| source ---|---|--- 2026-08-22 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mto6uokzka2t...

azureml-evaluate-mlflow (>=0.0.57, <=0.0.58), eensight (>=1.0.0, <=1.0.2) +6 more potentially affected by CVE-2026-64849 via mlflow (2.12.2)

mlflow PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.57, =1.0.0, =0.8.0, =0.0.6, =0.6.0.dev0, =0.10.0, =0.10.2 Source cves: CVE-2026-64849 Source advisory:...

PT-2026-80522

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip insight whitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server...

HP Systems Insight Manager - logfile File Read Detection (CVE-2010-3286)

Detects CVE-2010-3286 via HEAD switchFWInstallStatus.jsp?logfile=/etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2010-3286 via HEAD switchFWInstallStatus.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

CVE-2026-19281

creationtimestamp| type| source ---|---|--- 2026-08-09 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3msnisozdov2l...

Security Bulletin: Multiple vulnerabilities fixed in IBM SevOne Network Performance Management for July 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight component with a Service Pack update. Vulnerability Details CVEID:CVE-2025-61723 DESCRIPTION: The processing time for parsing some invalid inputs scales non-linearly with respect to...

adversarial-insight-ml (0.1.0), aiorobonect (>=0.2.6, <=0.2.8) +20 more potentially affected by CVE-2026-13346 via pip (23.2.1)

pip PYPI version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - adversarial-insight-ml 0.1.0 - aiorobonect =0.2.6, =2.0.3, =1.2.0, =1.0.0, =4.2.0, =0.0.2, =0.0.2, =0.0.5 - musclex 1.23.0 and more Source cves:...

VMware vRealize Log Insight < v8.10.2 - Information Disclosure Detection

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """VMware vRealize Log Insight contains an Information Disclosure...

VMware vRealize Log Insight - Improper Access Control to RCE Detection

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """The vRealize Log Insight...

VMware vRealize Log Insight - Path Traversal Detection

he vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """he vRealize Log Insight contains a...

eKare inSight Panel - Detect

eKare inSight panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """eKare inSight panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eKare inSight Panel - Detect', 'description': 'eKar...

Project Insight Login Panel - Detect

Project Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Project Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Project Insight Login Panel - Detect',...

vRealize Log Insight - Panel Detect

Detect vRealize Log Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vRealize Log Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vRealize Log...

CVE-2026-14172

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

CVE-2026-14172 Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

CVE-2026-14172

CVE-2026-14172 affects Rapid7 InsightVM, Nexpose, and the Insight Agent. The issue allows a local, low-privilege user to execute discovered executables during authenticated assessments due to lack of file ownership validation, enabling code execution as the scan credential (Scan Engine) or as roo...