Celonis Login - Panel Detection

Detects Celonis Process Intelligence login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Celonis Process Intelligence login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Celonis Login - Panel...

Dahua IPC/VTH/VTO - Authentication Bypass Detection

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. !/usr/bin/env python3 -- coding: utf-8 -- """The identity authentication bypass vulnerability found i...

Apache NiFi - Unauthenticated API Exposure Detection

Detects unauthenticated access to /nifi-api/process-groups/root RCE attack surface when API auth is disabled. Does not confirm command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi is designed for data streaming.""" from kittysploit import from lib.protocols.http.httpclient...

VTScada - Internet Client Panel Detection

VTScada by Trihedral Engineering is a SCADA platform used in water/ wastewater, oil and gas, and utilities. The Internet Client feature exposes a browser-based view of process data, and is commonly deployed by municipal water systems across North America. !/usr/bin/env python3 -- coding: utf-8 --...

Named Process Exporter Detection

Named process exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Named process exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Named Process Exporter Detection', 'description':...

Makefile - Exposure Detection

Detected Makefile configuration file was identified, which potentially exposed build process details, author information, and directory structure !/usr/bin/env python3 -- coding: utf-8 -- """Detected Makefile configuration file was identified, which potentially exposed build process details, auth...

CODESYS WebVisu - Panel Detection

CODESYS WebVisu is the web-based HMI Human-Machine Interface component of the CODESYS industrial automation runtime. It provides browser-based access to PLC visualizations and industrial control interfaces. Exposed instances may reveal real-time process data and control functions without...

AWS CodeBuild Build Spec - Exposure Detection

Detected the presence of the AWS CodeBuild buildspec.yml file. This file contains build commands and settings that may disclose sensitive information about the application's build process and infrastructure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the AWS CodeBuild...

Schneider Electric ClearSCADA - Panel Detection

ClearSCADA now branded as EcoStruxure Geo SCADA Expert is a Schneider Electric SCADA platform used in water, oil and gas, and utilities sectors. Exposed instances may provide unauthenticated access to industrial process data and control interfaces. !/usr/bin/env python3 -- coding: utf-8 --...

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage Detection

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. !/usr/bin/env python3 -- coding: utf-8 -- """Eclipse Jetty before 9.""" from kittysploit import from lib.protocols.http.httpclient import...

Ulterius Server < 1.9.5.0 - Directory Traversal Detection

Ulterius Server before 1.9.5.0 allows HTTP server directory traversal via the process function in RemoteTaskServer/WebServer/HttpServer.cs. !/usr/bin/env python3 -- coding: utf-8 -- """Ulterius Server before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

Dahua IPC/VTH/VTO - Authentication Bypass Detection

Some Dahua products contain an authentication bypass during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. !/usr/bin/env python3 -- coding: utf-8 -- """Some Dahua products contain an authentication bypass during the login process."""...

Security update for apache-sshd

This update for apache-sshd fixes the following issues: Update to upstream version 2.19.0. Security issues fixed: CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a path traversal issue in the sshd-scp component of Apache MINA SSHD. bsc1272158...

CVE-2026-58404

A flaw was found in Hugo, a static site generator. The default security policy intended to deny requests to loopback, internal, and cloud-metadata IPv4 addresses could be bypassed. This occurred because the deny rule only matched dotted-decimal notation, allowing alternate IPv4 encodings integer,...

CVE-2026-17524

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...

CVE-2026-16413

A flaw was found in ANGLE, a component of Chromium. A remote attacker who has compromised the renderer process could exploit an out-of-bounds write vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the sandbox, leading to further system compromis...

CVE-2026-17524

The CVE-2026-17524 entry concerns the zip-lib package for Node.js, with versions before 1.1.0 vulnerable to Directory Traversal during extraction via the caching path-validation logic. The root cause is that the isOutsideTargetFolder check is only performed when the initial directory symlink is c...

CVE-2026-17524

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...

EUVD-2026-49687

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...