DNP3 master probe

Active DNP3 master-style probe against an outstation on TCP/20000 !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.dnp3client import probednp3master from lib.protocols.ics.icsscannerclient import...

Auth0 Detection

Detects Auth0 tenants via OIDC metadata and hosted login pages. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Auth0 identity platform tenants.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse...

Host Header Injection Probe

Tests Host and X-Forwarded-Host manipulation for reflection in responses, redirects, and cache/password-reset style poisoning signals. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Host header and X-Forwarded-Host injection misconfigurations.""" from future import annotations import json fr...

JWT / OAuth Misconfiguration Probe

Probe API surfaces for JWT alg=none, weak secrets, OAuth callback open redirects, and missing state parameter enforcement. !/usr/bin/env python3 -- coding: utf-8 -- """ JWT and OAuth/OIDC misconfiguration probe. Detects alg=none, weak HMAC secrets, expired-signature acceptance, open redirects in...

Traefik Dashboard Detection

Detects Traefik reverse-proxy dashboard and /api/overview exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Traefik dashboard and API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Traefik...

Malicious code in dc-repro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b27530f3aa6f2f96c3aa77ffad048e51ee4479d60c81ce59687772b6985a99b On npm install, postinstall.js issues an HTTP GET to a hardcoded bare-IP endpoint at http://130.49.177.51:18080/p/dc-20260627-yandex-geobase carrying...

Malicious code in dl-pp-latm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f1adb71c41838848c4d4292830a9738895d32a5b0f1f098e1efdadb233716 Package [email protected] registers both preinstall and postinstall lifecycle hooks that run index.js, which collects installer machine identifiers —...

toshsd MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the toshsdprobe function in the drivers/mmc/host/toshsd.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenEMR Fax/SMS Module Path Traversal Detection Scanner

This repository contains a detection-only security scanner for CVE-2026-24849 affecting the OpenEMR Fax/SMS module. It identifies potentially vulnerable OpenEMR installations by checking the application version, verifying the Fax/SMS module is present, probing the affected endpoint, and optionall...

Linux kernel Voltage Regulator Buffer Overflow DoS

The vulnerability of the pca9450i2cprobe function in the drivers/regulator/pca9450-regulator.c file of the Linux kernel’s voltage and current regulator driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a syste...

CVE-2026-14801 GPAC TeXML File load_text.c txtin_probe_duration divide by zero

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file src/filters/loadtext.c of the component TeXML File Handler. Such manipulation of the argument txmltimescale leads to divide by zero. An attack...

EUVD-2026-41814

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file src/filters/loadtext.c of the component TeXML File Handler. Such manipulation of the argument txmltimescale leads to divide by zero. An attack...

CVE-2026-14801 GPAC TeXML File load_text.c txtin_probe_duration divide by zero

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file src/filters/loadtext.c of the component TeXML File Handler. Such manipulation of the argument txmltimescale leads to divide by zero. An attack...

CVE-2026-14801

Removed by vendor...

Malicious Package

Overview @zynkit/probe is a malicious package. This package contains malicious code and is part of a coordinated npm supply-chain campaign. It ships an obfuscated postinstall payload that downloads and executes a Rust-compiled infostealer binary. Impact The infostealer targets crypto wallets,...

Malicious Package

Overview @frostnode/probe is a malicious package. This package contains malicious code and is part of a coordinated npm supply-chain campaign. It ships an obfuscated postinstall payload that downloads and executes a Rust-compiled infostealer binary. Impact The infostealer targets crypto wallets,...

badguythehacker

BountyAgent An autonomous AI-powered bug bounty platform. Spa...

CVE2PoC

CVE2PoC A prototype for generating real npm vulnerability PoC...

CVE-2026-53348

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC SoundWire Digital Audio SDCA component. The sdcadevunregisterfunctions function does not properly check for NULL function device entries during unregistration. This oversight can lead to a NULL point...

Server-side Request Forgery (SSRF)

Overview @jshookmcp/jshook is a MCP server with built-in tools across multiple domains for AI-assisted JavaScript analysis and security analysis — browser automation, CDP debugging, network monitoring, JS hooks, code analysis, and workflow orchestration Affected versions of this package are...