VulnCheck KEV: CVE-2026-20316

Cisco Secure Firewall Management Center FMC formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the...

MaliciousBrowserExtensions — Updated!

Malicious Browser Extensions Join the Discord Try our Extension Try ExterminAI Overview ❗ The owner and contributors are NOT RESPONSIBLE in any shape or form for any damage inflicted by the negligent use of samples stored in the repository, users must take necessary precautions prior to executing...

phpstan v1.12.34

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

Shirne CMS 1.2.0 - Local File Inclusion Detection

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. !/usr/bin/env python3 -- coding: utf-8 -- """Shirne CMS 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure Detection

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

Homer Panel - Detect

A simple static homepage was discovered !/usr/bin/env python3 -- coding: utf-8 -- """A simple static homepage was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Homer Panel - Detect', 'description': 'A...

Ray Static File - Local File Inclusion Detection

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.""" import re from kittysploit import from...

Ghost CMS < 5.42.1 - Path Traversal Detection

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js. !/usr/bin/env python3 -- coding: utf-8 -- """Ghost before 5.""" from kittysploit import...

aiohttp - Directory Traversal Detection

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

WordPress <= 5.2.4 - Unauthenticated View Private/Draft Posts Detection

WordPress before 5.2.4 contains an information disclosure caused by mishandling of the static query property, letting unauthenticated users view certain content, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress before 5.""" import re from kittysploit impo...

Nextjs <2.4.1 - Local File Inclusion Detection

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /next and /static request namespace, allowing attackers to obtain sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """ZEIT Next.""" import re from kittysploit import from lib.protocols.http.httpclient import...

ai-reverse-engineering — Updated!

Rev·Deck — AI-Assisted Reverse Engineering with Ghidra Rev·Deck is a local, single-user static-analysis workstation. It pairs an evidence-first web UI with an LLM copilot over a binary analyzed by a headless Ghidra service: browse deterministic evidence functions, strings, imports,...

PT-2026-65491

Unchecked unsigned integer overflow in buffer size calculation in schreibfaul1 ESP32-audioI2S 3.4.5 leads to undersized PSRAM buffer allocation. Subsequent normal audio buffer read and write operations cause heap out-of-bounds access, memory corruption, denial of service, and potential code...

CVE-2026-59730

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is configured, the @astrojs/node standalone server's static file handler appends a trailing slash to request paths and issues a 301 redirect. Paths beginning with /\ slash-backslas...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC [CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC or WebFlux CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846. Spring MVC is used as part of our microservices. These vulnerabilities have been addressed. Please read the detail...

CVE-2026-59730

CVE-2026-59730 affects the Astro ecosystem via the @astrojs/node standalone server. In versions 8.1.0–11.0.1, with trailingSlash: 'always', the static file handler could mishandle paths starting with a backslash (/), echoing the raw path in the Location header of a 301 redirect. Because browsers ...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk-portable: java-25-openjdk-portable-25.0.4.0.7-2.0.2.hum1 aarch64, x8664 java-25-openjdk-portable-devel-25.0.4.0.7-2.0.2.hum1 aarch64, x8664...

ROOT-APP-NPM-CVE-2024-43800 CVE-2024-43800 in @rootio/serve-static - Patched by Root

Root has patched CVE-2024-43800 in the @rootio/serve-static package for Root:npm. Multiple fixed versions available...

CVE-2026-17534

Kimi Code fetch path FetchURL is vulnerable before 0.27.0: it hardens SSRF protection with a static hostname and IP-literal denylist in assertSafeFetchTarget but does not resolve DNS or re-validate after HTTP redirects. An attacker who can influence a FetchURL call (e.g., via prompt injection) ca...

phpstan v2.2.6

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...