CVE-2026-8167

creationtimestamp| type| source ---|---|--- 2026-07-28 11:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdyyeigg2s...

CVE-2026-14328

creationtimestamp| type| source ---|---|--- 2026-07-28 11:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdiqtrku23...

CVE-2026-11598

creationtimestamp| type| source ---|---|--- 2026-07-28 11:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22...

CVE-2026-9680

creationtimestamp| type| source ---|---|--- 2026-07-28 11:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcypa3cy2a...

CVE-2026-14516

creationtimestamp| type| source ---|---|--- 2026-07-28 11:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcvdklcz23...

Aptana Jaxer 1.0.3.4547 - Local File inclusion Detection

Aptana Jaxer 1.0.3.4547 is vulnerable to local file inclusion in the wikilite source code viewer. An attacker can read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI. !/usr/bin/env python3 -- coding: utf-8 -- """Aptana Jaxer 1.""" import re from kittysploit impo...

WAVLINK WN533A8 - Improper Access Control Detection

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

Astro - Information Disclosure Detection

Astro versions v5.0.3 through v5.0.7 and Astro v4.16.17 or older with sourcemaps enabled contain a source code disclosure caused by sourcemap files being publicly accessible in the build output folder, letting unauthenticated users read server source code, exploit requires sourcemaps to be enable...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...

Microsoft SharePoint - Remote Code Execution Detection

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source mark."...

WordPress Plugin WP Content Source Control - Directory Traversal Detection

A directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. !/usr/bin/env python3...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

React / Vite Dev Server Exposure Detection

Detects development-mode React tooling left reachable Vite client, React Refresh, webpack HMR / sockjs which often leaks source and enables SSRF. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React/Vite/webpack development servers exposed to the network.""" from kittysploit import from...

SonarQube - Information Disclosure Detection

Information leakage vulnerability in an interface of SonarQube, you can download the source code through the tool. !/usr/bin/env python3 -- coding: utf-8 -- """Information leakage vulnerability in an interface of SonarQube, you can download the source code through the t.""" from kittysploit impor...

Vercel Source Code Exposure Detection

The Vercel Source Code Exposure misconfiguration allows an attacker to access sensitive source code files on the Vercel platform. !/usr/bin/env python3 -- coding: utf-8 -- """The Vercel Source Code Exposure misconfiguration allows an attacker to access sensitive source code files on t.""" from...

Airbyte Panel Detection

Detects Airbyte open-source data integration panel and health API. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Airbyte data integration panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Airbyte Panel...

Rstudio Shiny Server <1.5.16 - Local File Inclusion Detection

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """Rstudio Shiny Server prior to 1.""" import re from kittysploit import from...

Intelbras WIN 300/WRN 342 - Credentials Disclosure Detection

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. !/usr/bin/env python3 -- coding: utf-8 -- """Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers t...

WAVLINK WN530HG4 - Improper Access Control Detection

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd and thereby possibly obtain sensitive information, modify data, and/or execute...

Remita Merchant ID & API Key - Exposure Detection

Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuration files, or publicly accessible assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuratio...