Exploit for CVE-2026-49865

Kimai CVE-2026-52824 — Default APPSECRET Authentication Bypas...

phpMyAdmin Default Login

Attempts common default phpMyAdmin credentials after extracting CSRF tokens. !/usr/bin/env python3 -- coding: utf-8 -- """phpMyAdmin default credentials.""" import re from urllib.parse import urljoin from kittysploit import from lib.protocols.http.httpclient import Httpclient BASES = "/",...

Grafana Default Login

Detects Grafana default admin credentials via /login JSON API. !/usr/bin/env python3 -- coding: utf-8 -- """Grafana default login.""" import json from kittysploit import from lib.protocols.http.httpclient import Httpclient CREDS = "admin", "prom-operator", "admin", "admin", PATHS = "/login",...

Tomcat Manager Default Login

Detects Apache Tomcat Manager default credentials via HTTP Basic. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Tomcat Manager default login.""" import base64 from kittysploit import from lib.protocols.http.httpclient import Httpclient Common Tomcat Manager credential pairs CREDS = "tomcat"...

SNMP Default Community

Probes SNMP v1/v2c agents for common default community strings e.g. public/private via sysDescr. !/usr/bin/env python3 -- coding: utf-8 -- """Detect SNMP agents accepting default community strings.""" from kittysploit import DEFAULTCOMMUNITIES = "public", "private", "community", "snmp", "snmpd",...

vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects

A flaw was found in Eclipse Vert.x. The DefaultRedirectHandler in vertx-core improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a...

[SECURITY] Fedora 43 Update: perl-HTTP-Date-6.08-1.fc43

This module provides functions that deal the date formats used by the HTTP protocol and then some more. Only the first two functions, time2str and str2time, are exported by default...

PT-2026-66609

Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn ships with default C2 credentials in payload.json and core/payload schema.py, which are passed unchanged to lazyc2.py for HTTP Basic authentication. This allows a...

CVE-2026-68503: Use of Default Credentials

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payloadschema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachabl...

CVE-2026-44094: Not Failing Securely

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-67208: Missing Authentication for Critical Function

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...

PT-2026-66471

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized keys file for the root user. An attacker in possession of the...

PT-2026-66422

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-52539

Outstatic CMS = 2.1.9 contains a hardcoded JWT signing secret. When the OSTTOKENSECRET environment variable is not set, the application falls back to the default value which is publicly visible in the source code repository. An unauthenticated remote attacker can exploit this by forging JWT sessi...

PT-2026-66572

Name of the Vulnerable Software and Affected Versions Juggle versions prior to 1.6.0 Description Unauthenticated remote attackers can execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected...

CVE-2026-13697 undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...

Req vulnerable to unbounded archive/compression extraction triggered by response content-type

Summary Req's default response pipeline auto-decodes archive and compressed bodies based on the server-supplied content-type or URL extension and materialises the full decompressed contents in memory with no size cap. An attacker who controls or can redirect a victim into an HTTP endpoint reached...

EUVD-2026-35098

Req vulnerable to unbounded archive/compression extraction triggered by response content-type...

veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

Summary veraPDF-validation has an XML External Entity XXE vulnerability in two PDF parsing paths validate and GFPDAcroForm.getdynamicRender. A malicious/crafted PDF supplied to a veraPDF consumer can lead to the expansion of external entities while parsing rich-text annotation/form-field values o...

CVE-2026-54082 veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate... and GFPDAcroForm.getdynamicRender, where default DocumentBuilderFactory parsing of...