CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

CasaOS - Unauth Config/Debug Disclosure (CVE-2025-34171)

CasaOS = 0.4.15 exposes unauthenticated /v1/users/image?path=... under /var/lib/casaos/1/ and /v1/sys/debug host information CVE-2025-34171. !/usr/bin/env python3 -- coding: utf-8 -- """CasaOS unauthenticated config/debug disclosure CVE-2025-34171.""" from kittysploit import from...

DjangoCRM CVE-2026-71238 Debug Disclosure Detect

Detects CVE-2026-71238 in DjangoCRM 0.91 through 2.4.0: shipped webcrm/settings.py keeps DEBUG=True and relies on secret URL prefixes for admin/CRM access. A bogus i18n 404 triggers Django's technical404response and leaks those prefixes to any anonymous requester, defeating access-by-obscurity...

SUSE-SU-2026:22861-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails bsc1271495. - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files bsc1268878. - CVE-2026-61464: Heap...

CVE-2017-8840

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...