CVE-2026-30266: Insecure Inherited Permissions

Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file...

CVE-2026-40482: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM is an open-source church management system. Versions prior to 7.2.0 have SQL injection in FinancialService::getMemberByScanString via unsanitized $routeAndAccount concatenated into raw SQL. This issue has been fixed in version 7.2.0...

PHPInfo exposure detection

Detects exposed phpinfo pages that disclose PHP configuration, modules, paths, and environment details. !/usr/bin/env python3 -- coding: utf-8 -- """Détection pages phpinfo exposées.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient PATHS = "/phpinfo.php", "/info.php...

Exposed .env file detection

Detects publicly accessible .env files containing application secrets or environment configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Détection fichiers .env exposés.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient PATHS = "/.env", "/.env.local",...

CVE-2026-41153: Improper Neutralization of Special Elements used in a Command

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

CVE-2026-6284: Weak Password Requirements

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

CVE-2026-21709: Improper Neutralization of Special Elements used in a Command

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement...

CVE-2025-15625: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases...

CVE-2026-21733: Improper Handling of Insufficient Permissions or Privileges

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections...

web-vulnerability-scanner

...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 6, 2026 to April 12, 2026)

Last week, there were 157 vulnerabilities disclosed in 141 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 79 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

python-vulnerability-scanner

Python Web Vulnerability Scanner This project is a simple Pyt...

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822 The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code...

MAL-2026-2718 Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822 The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code...

WordPress Barcode Scanner (+Mobile App) plugin <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication vulnerability

Unauthenticated Privilege Escalation via Insecure Token Authentication vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.11.0...

Login Page Detector

Detects whether a target exposes login pages admin/login, email+password, username+password !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.moduleresult import finalizehttpscannerrun, targetbaseurl import...

Simple Login Scanner

Simple scanner that detects login forms on a web page !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient import re class ModuleAuxiliary, Httpclient: info = 'name': 'Simple Login Scanner', 'description': 'Simple scanner that...

Admin Login Bruteforce

Bruteforce an admin login page with username/password wordlists. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient import os import re from urllib.parse import parseqsl, urlparse class ModuleAuxiliary, Httpclient: info = 'name':...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

EUVD-2026-23136

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...