CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

Pulsar Admin UI Panel - Detect

Pulsar admin UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin UI Panel - Detect', 'description':...

Insertion of Sensitive Information Into Sent Data

Overview @keycloak/keycloak-admin-ui is a This project is the next generation of the Keycloak Admin UI. It is written with React and PatternFly 4 and uses Vite. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through...

Apache Airflow Detection

Detects Airflow /api/v1/health and admin UI. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Apache Airflow web UI and health API.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse class...

Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...

GHSA-2WWR-9X6F-88GP EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

EasyAdminBundle ships two public Twig components — and — that load SVG files from disk using a path built directly from a public component property, and then render the resulting markup with the Twig |raw filter. When an application binds either of those properties to data that is influenced by a...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-14209 Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

EUVD-2026-40299

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-14209: Authorization Bypass Through User-Controlled Key

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

PT-2026-53860

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

Insecure Default Initialization of Resource

Overview kozou is a Kozou CLI: scaffolding, schema introspection, and MCP server entry points. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to insufficient validation of the Host and Origin headers in the MCP HTTP server, unbounded request-bo...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.0.0)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.1.0)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides...

io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), org.keycloak:keycloak-guides (21.1.1) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.1.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-guides (22.0.2), org.keycloak:keycloak-guides-maven-plugin (22.0.2) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (22.0.2)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 22.0.2 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (23.0.2), org.keycloak:keycloak-guides-maven-plugin (23.0.2) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.2)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.2 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (23.0.7), org.keycloak:keycloak-guides-maven-plugin (23.0.7) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.7)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.7 - org.keycloak:keycloak-guides-maven-plugin...