85 matches found
CVE-2026-91966: Server-Side Request Forgery (SSRF)
AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...
globalping-probe v0.52.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...
CVE-2026-77351: Server-Side Request Forgery (SSRF)
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host — including private and cloud-metadata IP addresses — in their personal email notification settings, with no server-side SSRF validation...
CVE-2026-79717
A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...
CVE-2026-79717: Server-Side Request Forgery (SSRF)
A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...
Malicious code in @years18/n8n-nodes-utils-helper-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df58050e02ff53c728a303196575150af9e64959761f10079284077b1c274572 On npm install, the package's postinstall hook callback.js / index.js executes shell commands including id and hostname, probes the internal RFC1918...
Malicious code in @noobaihome/amis-uni-area-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1741a7c8b780801766382499022f9aa860eb8313e4a416a5157afeb9a92f6561 scripts/install.js runs during npm preinstall and performs three attacker-beneficial actions against the installer host. First, it unconditionally...
Malicious code in simple-date-formatter-new-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5ed3c402677fcfaeac396b55b9db5280445e9b0130133cc311a83f96f2a0de Package advertises itself as a date-formatting utility but its actual behavior on install is credential theft and internal-network reconnaissance. Th...
MAL-2026-12196 Malicious code in simple-date-formatter-new-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5ed3c402677fcfaeac396b55b9db5280445e9b0130133cc311a83f96f2a0de Package advertises itself as a date-formatting utility but its actual behavior on install is credential theft and internal-network reconnaissance. Th...
globalping-probe v0.50.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...
Fortinet FGFM protocol - Detect
FortiGate to FortiManager Protocol FGFM was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiGate to FortiManager Protocol FGFM was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...
Dropbear sshd Detection
Dropbear is a software package written by Matt Johnston that provides a Secure Shell-compatible server and client. It is designed as a replacement for standard OpenSSH for environments with low memory and processor resources, such as embedded systems !/usr/bin/env python3 -- coding: utf-8 --...
MSMQ (Microsoft Message Queuing Service) Remote - Detect
Detects remote MSMQ services. Public exposure of this service may be a misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Detects remote MSMQ services.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner,...
NocoBase - Detect
NocoBase is an open source, extensibility-first, low-code platform for building business applications and enterprise solutions. !/usr/bin/env python3 -- coding: utf-8 -- """NocoBase is an open source, extensibility-first, low-code platform for building business applications and ente.""" from...
OpenSign Login Panel - Detect
OpenSign Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSign Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenSign Login Panel - Detect', 'description':...
AFP Server Detect
Detects AFP Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AFP Server Detect.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'AFP Server Detect', 'description':...
Weaviate Console - Detect
Detected Weaviate Console interface. Weaviate was open-source vector database that stores data objects and vector embeddings for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Weaviate Console interface.""" from kittysploit import from lib.protocols.http.httpclient import...
Webmodule Login Panel - Detect
Webmodule login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webmodule login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webmodule Login Panel - Detect', 'description':...
Detect PRTG
Monitor all the systems, devices, traffic, and applications in your IT infrastructure -- https://www.paessler.com/prtg !/usr/bin/env python3 -- coding: utf-8 -- """Monitor all the systems, devices, traffic, and applications in your IT infrastructure -- https://www.""" import re from kittysploit...
Qualys Cloud Platform Login Panel - Detect
Qualys Cloud Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualys Cloud Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualys Cloud Platform Login...