CVE-2026-61450

Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author any admin.pages user, or anyone able to write to user/pages to exfiltrate configuration secrets. Although the sandbox replaces the 'config' variable with a redacted facade and strips Config::get/toArray from the method...

CVE-2026-56373

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory...

CVE-2026-56690

Dell PowerFlex Manager, Version prior to 5.1.0.1, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information...

PostgreSQL Info Detection

Detects PostgreSQL via startup handshake and authentication challenge. !/usr/bin/env python3 -- coding: utf-8 -- """Detect PostgreSQL service via startup handshake.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.postgresql.detectors...

Neo4j Unauthenticated Query Verification

Confirms anonymous Neo4j HTTP transaction commits with RETURN 1. !/usr/bin/env python3 -- coding: utf-8 -- """Verify unauthenticated Neo4j Cypher queries.""" import json from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import...

MSSQL Info - Detection

Detects MSSQL via TDS prelogin and reports version and encryption hints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft SQL Server via TDS prelogin.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.mssql.detectors import...

MongoDB Unauthenticated Access Detection

Detects exposed MongoDB and whether databases are readable without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detect MongoDB instances and unauthenticated access.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

Cassandra Native Protocol Detection

Detects Cassandra via CQL native protocol OPTIONS/SUPPORTED handshake. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Cassandra CQL native protocol on TCP 9042.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.cassandra.detectors...

Memcached Detection

Detects Memcached and unauthenticated stats command access. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Memcached and unauthenticated stats access.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.memcached.detectors import...

ClickHouse Unauthenticated Query Verification

Confirms anonymous ClickHouse HTTP queries via SELECT version and SELECT 1. !/usr/bin/env python3 -- coding: utf-8 -- """Verify unauthenticated ClickHouse SQL queries over HTTP.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...

MySQL login bruteforce

Attempts common and wordlist-based MySQL/MariaDB credentials. Use only on authorized targets — rate-limited by default. !/usr/bin/env python3 -- coding: utf-8 -- """ MySQL login bruteforce — tests username/password combinations against a MySQL/MariaDB server. """ from future import annotations...

Adminer Detection

Detects Adminer single-file DB admin panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Adminer database administration panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class ModuleScanne...

CVE-2026-58225

This CVE affects postgrex (specifically Postgrex.Notifications) used with elixir-ecto. The root cause is a SQL injection-like flaw in the reconnect replay: on (re)connect, handle_connect/1 concatenates LISTEN statements and wraps them in a dollar-quoted block (DO $$ ... $$). quote_channel/1 doubl...

CVE-2026-13010

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-13010 JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

SUSE-SU-2026:22623-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

SUSE-SU-2026:22592-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

CVE-2026-10879

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The preparse method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can resul...

CVE-2026-40006

Apache IoTDB versions 1.0.0 through 2.0.9 are vulnerable to a heap exhaustion Denial of Service (DoS) due to a Missing Authentication for Critical Function and Allocation of Resources Without Limits . When pipe_air_gap_receiver_enabled is set to true, the AirGap pipe receiver accepts unauthentica...

CVE-2026-40006 Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for Critical Function vulnerability in Apache IoTDB. When pipeairgapreceiverenabled=true, the IoTDB AirGap pipe receiver accepts raw TCP connections on port 9780 with no...