4222 matches found
UBUNTU-CVE-2026-55768
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum...
CVE-2026-55777
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...
dpckan (0.0.1.9000), pysqream-log-analyzer (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-13346 via pip (21.1.2)
pip PYPI version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - dpckan 0.0.1.9000 - pysqream-log-analyzer =0.0.1, =0.1.8, =0.1.10 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...
Malicious code in flight-compare-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc2dd463956db0c56774e8da768bd425fbd36a855f2e7d820390bf6c664ee395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11185 Malicious code in flight-compare-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc2dd463956db0c56774e8da768bd425fbd36a855f2e7d820390bf6c664ee395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview flight-compare-analyzer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Janitza UMG Power Meter - Login Panel Detection
Janitza UMG series power meters and energy analyzers expose a web interface for energy monitoring and power quality analysis. !/usr/bin/env python3 -- coding: utf-8 -- """Janitza UMG series power meters and energy analyzers expose a web interface for energy monitoring and power qu.""" from...
SonicWall Analyzer Login Panel - Detect
SonicWall Analyzer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analyzer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Analyzer Login Panel -...
Webalizer Log Analyzer Configuration - Detect
Webalizer log analyzer configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webalizer log analyzer configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webalizer Log Analyze...
PQube 3 Power Analyzers Detection
PQube 3 Power Analyzer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PQube 3 Power Analyzer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PQube 3 Power Analyzers Detection',...
Netflow Analyzer Login - Panel Detection
Detects Netflow Analyzer Login - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Netflow Analyzer Login - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netflow Analyzer Login - Panel Detection',...
ManageEngine Firewall Analyzer <8.0 - Local File Inclusion Detection
ManageEngine Firewall Analyzer before 8.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine Firewall Analyzer before 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting Detection
SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. !/usr/bin/env python3 --...
ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting Detection
Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...
WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting Detection
A cross-site scripting vulnerability in js/taloaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter." !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...
Zoho manageengine - Cross-Site Scripting Detection
Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sqlite: lemon-3.53.4-0.1.hum1 aarch64, x8664 sqlite-3.53.4-0.1.hum1 aarch64, x8664 sqlite-analyzer-3.53.4-0.1.hum1 aarch64, x8664 sqlite-debug-3.53.4-0.1.hum1 aarch64, x8664...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.1-2.hum1 aarch64, x8664 clippy-1.97.1-2.hum1 aarch64, x8664 rust-1.97.1-2.hum1 aarch64, x8664 rust-analyzer-1.97.1-2.hum1 aarch64, x8664 rust-debugger-common-1.97.1-2.hum1 noarch...
EUVD-2026-47029
Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Client System Analyzer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2026-60670
Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Client System Analyzer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...