super v1.2.2

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-64642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using...

PT-2026-65866

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

Linux Distros Unpatched Vulnerability : CVE-2026-64643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using...

CVE-2026-47219

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

EUVD-2026-50084

find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup function passes req.method into...

EUVD-2026-50023

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism...

CVE-2026-16347

MikroTik RouterOS contains an API authentication weakness where rate-limiting, account lockout, and source-based restrictions are not effectively enforced. The system can permit repeated failed logins; some versions include a fixed per-connection delay that can be bypassed via concurrent sessions...

Improper Restriction of Security Token Assignment

Overview Affected versions of this package are vulnerable to Improper Restriction of Security Token Assignment via the /upload/file endpoint accepting any valid panel-signed JWT containing serveruuid, useruuid, and uniqueid claims without verifying the token's intended purpose. An attacker can...

CVE-2026-55685

A flaw was found in React Router. An unauthenticated attacker can send targeted requests to the manifest endpoint, leading to a denial of service DoS. This can put a heavy load on the server, significantly slowing down response times and impacting the availability of the application. Mitigation...

CVE-2026-64646

A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service DoS due to resource exhaustion...

CVE-2026-64642

A flaw was found in Next.js, a React framework. A remote attacker can bypass authentication in Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales by sending crafted requests. This vulnerability allows for unauthorized access, leading to a high...

CVE-2026-64641

A flaw was found in Next.js, a React framework for building web applications. A remote attacker can send specially crafted requests to Next.js applications that utilize the App Router with Server Actions. This can lead to excessive CPU usage, causing the application to become unresponsive and...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure Detection

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Qualcomm 4G LTE WiFi VoIP Router Panel - Detect

Qualcomm 4G LTE Wifi VoIP router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualcomm 4G LTE Wifi VoIP router panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualcomm 4G LTE...

Seowon 130-SLC router - Remote Code Execution Detection

Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users via the router ip & Portif available in the request. !/usr/bin/env python3 -- coding: utf-8 -- """Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users v...

Detect MRTG

The Multi Router Traffic Grapher !/usr/bin/env python3 -- coding: utf-8 -- """The Multi Router Traffic Grapher.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect MRTG', 'description': 'The Multi Router Traffic...

XSpeeder Login - Detect

Detects the presence of XSpeeder router login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of XSpeeder router login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XSpeeder Login ...

NETGEAR Router Panel - Detect

NETGEAR router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NETGEAR Router Panel - Detect',...

Telesquare TLR-2005KSH Login Panel - Detect

Telesquare TLR-2005KSH login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Telesquare TLR-2005KSH login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Telesquare TLR-2005KSH...