HTTP NTLM Info

Sends an NTLM Type-1 negotiate and parses the Type-2 challenge for NetBIOS / DNS domain and computer names NSE http-ntlm-info. !/usr/bin/env python3 -- coding: utf-8 -- """HTTP NTLM challenge info NSE http-ntlm-info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Oracle TNS Version

Queries Oracle TNS Listener for version/banner information NSE oracle-tns-version. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle TNS version NSE oracle-tns-version.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.oracle.detectors...

TLS-Scanner v7.0.0-rtc

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

SkillSpector v2.5.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

Sirius v1.1.0

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start root@kitploit: git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

CVE-2026-21662: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...

CVE-2026-43831: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution...

CVE-2026-17561: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...

CVE-2026-51785: Improper Control of Generation of Code

An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2026-18321: Buffer Copy without Checking Size of Input

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-34497: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting XSS. This issue affects FM Systems Employee: before 2025.3.1...

CVE-2026-34495: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1...

CVE-2026-56571: Generation of Error Message Containing Sensitive Information

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated...

CVE-2026-14921: Improper Neutralization of Input During Web Page Generation

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, UltimateVCAddons::uavclinkinit,...

CVE-2026-14540: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client...

CVE-2026-43832: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...

CVE-2026-43833: Undefined Security Weakness

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution...

CVE-2026-43829: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...

CVE-2026-43830: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands...