Vugex Framework Source Code - Detect

Detects the presence of exposed Vugex Framework source code by identifying common files and directories associated with the framework. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of exposed Vugex Framework source code by identifying common files and directories associ."""...

IBM WebSphere Application - Source File Exposure Detection

Disclose application specific files contained within the war file, including files under the web-inf and meta-inf directories. !/usr/bin/env python3 -- coding: utf-8 -- """Disclose application specific files contained within the war file, including files under the web-inf and meta-.""" from...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion Detection

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

Drupal - Source Code Disclosure Detection

Detected exposed Drupal source code, backup files, and sensitive configurations, potentially disclosing database credentials and API keys. This exposure revealed internal system paths and critical site metadata, increasing the risk of full system compromise. !/usr/bin/env python3 -- coding: utf-8...

.gitmodules File Exposed Detection

The .gitmodules file was exposed on the web server as part of an accessible .git directory.This exposure indicated a misconfiguration that could have allowed attackers to explore the .git directory further and potentially reconstruct or download the full source code repository. !/usr/bin/env...

Phalcon Framework - Source Code Leakage Detection

Phalcon Framework source code was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Phalcon Framework source code was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phalcon Framework - Source Code...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

Sonicwall - Pre-Authentication Arbitrary File Read Detection

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

WordPress Data Source for Contact Form 7 - Full Path Disclosure Detection

WordPress Plugin CData Source for Contact Form 7 files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin CData Source for Contact Form 7...

CVE-2023-3349

creationtimestamp| type| source ---|---|--- 2026-07-28 11:24:32+00:00| seen| https://bsky.app/profile/r-redteamsec.bsky.social/post/3mrpcemldno2q 2026-09-01 20:00:06+00:00| seen| https://t.me/hackingAttack/190060 2026-09-02 01:00:24+00:00| published-proof-of-concept|...

CVE-2026-5326

creationtimestamp| type| source ---|---|--- 2026-07-28 11:02:01+00:00| seen| https://gist.github.com/alon710/7412d8adaff2427de50f99e5817de762...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libXpm: libXpm-3.5.19-4.hum1 aarch64, x8664 libXpm-devel-3.5.19-4.hum1 aarch64, x8664 libXpm-3.5.19-4.hum1.src src Security Fixes: libXpm: CVE-2026-4367...

CVE-2026-16462

creationtimestamp| type| source ---|---|--- 2026-07-28 09:29:06+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp3vuzo4l42 2026-07-28 11:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdnn7ydg23 2026-07-28 15:26:06+00:00| seen|...

CVE-2026-14167

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:32:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcrz7cxf2p...

CVE-2026-14169

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdebf67v27...

CVE-2026-14168

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:50:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdszb2gz23...

CVE-2026-14171

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcmdrf4p2a...