JetDirect / PJL Service Detection (port 9100)

Detects network printers exposing raw JetDirect/AppSocket on TCP 9100 and probes the PJL command interface with INFO ID. Optionally checks whether FSUPLOAD path traversal returns /etc/passwd content. !/usr/bin/env python3 -- coding: utf-8 -- """Detect HP JetDirect / AppSocket raw printing and PJL...

RIPS - function.php LFI Detection (CVE-2025-34126)

Detects RIPS LFI via /windows/function.php?file=/etc/passwd requires phps-t marker. !/usr/bin/env python3 -- coding: utf-8 -- """RIPS Scanner function.php path traversal CVE-2025-34126.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

deepslop

DEEPSLOP — PS5 WebKit Exploit Kit 13.60 / WebKit RCE كيت اس...

Linux Distros Unpatched Vulnerability : CVE-2026-68406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject...

CVE-2026-66411: Incorrect Implementation of Authentication Algorithm

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-72761: Server-Side Request Forgery (SSRF)

The webhook URL validator in website/notifications/webhooks.py uses ip.isglobal to reject non-public addresses after DNS resolution. IPv6 transition addresses NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001:0000::/32 are classified as globally routable by IANA, so isglobal returns True even when...

CVE-2026-56619: Improper Neutralization of Input During Web Page Generation

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting Reflected XSS due to insufficient validation and output encoding of user-controlled input...

CVE-2026-56620: Generation of Error Message Containing Sensitive Information

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-68412: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211wextsiwscan If the test against IEEE80211MAXSSIDLEN fails, then 'creq' leaks. Use the existing error handling path to fix it...

CVE-2026-6791: Stack-based Buffer Overflow

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

CVE-2026-68126: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing sdata-dev after rcureadunlock and outside the rtnl -- in the failure...

Nuclei 3.11.1

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

CVE-2026-8718: Out-of-bounds Write

tlsoptdtlspeerconnectionidvalueget in subsys/net/lib/sockets/socketstls.c, which handles getsockoptSOLTLS, TLSDTLSPEERCIDVALUE, passed the caller-supplied optval directly to mbedtlssslgetpeercid without verifying the buffer was at least MBEDTLSSSLCIDOUTLENMAX default 32 bytes. mbedtlssslgetpeerci...

Linux Distros Unpatched Vulnerability : CVE-2026-68106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0...

Linux Distros Unpatched Vulnerability : CVE-2026-68351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read When the firmware sends a command response with a length mismatch, carl9170cmdcallback...

RHEL 10 : nodejs-nodemon (RHSA-2026:52394)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Linux Distros Unpatched Vulnerability : CVE-2026-68107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a...

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners

Agent skills are emerging as an important attack surface in LLM-based agent systems. Through an empirical study of existing skill scanners, we find that current defenses mainly inspect individual skills, leaving risks from cross-skill composition insufficiently examined. This creates a practical...

CVE-2026-6374: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026...

CVE-2026-21078: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...