EUVD-2026-49845

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

CVE-2026-66922

Pivotick CVE-2026-66922 affects the tree-layout and cycle-detection code by using plain JavaScript objects as lookup tables indexed with node identifiers that can collide with Object.prototype properties (e.g., constructor, toString, proto ). This can cause inherited-property confusion, wrong typ...

CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

OffsetInspect v3.3.0

OffsetInspect A bounded-memory PowerShell toolkit for byte-offset inspection, source correlation, binary comparison, and defensive detection-boundary analysis. OffsetInspect answers a practical analyst question: What content is present at this byte offset, and what source or binary context...

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

EUVD-2026-49768

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

Cisco Unified Communications Self-Service User Portal - Detection

Detected the presence of the Cisco Unified Communications User Management Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the Cisco Unified Communications User Management Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Buildbot Panel - Detect

Buildbot panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Buildbot panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Buildbot Panel - Detect', 'description': 'Buildbot pane...

Krpano Panorama Viewer - Detection

Detected Krpano Panorama Viewer by identifying known Krpano-specific resources and response patterns. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Krpano Panorama Viewer by identifying known Krpano-specific resources and response patterns.""" from kittysploit import from...

Dex Authentication - Panel Detection

Detects Dex Authentication - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dex Authentication - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dex Authentication - Panel Detection', 'description...

UserGate NGFW/UTM Admin Panel - Detect

Detect UserGate NGFW/UTM Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detect UserGate NGFW/UTM Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UserGate NGFW/UTM Admin Panel - Detect',...

React SPA Stack Detection

Identifies standalone React SPAs CRA / Vite / classic and explicitly differentiates them from Next.js so the correct scanner pack can run. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprint React SPA stacks and distinguish them from Next.js.""" from kittysploit import from...

Rhymix CMS Detect

Detects Rhymix CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rhymix CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rhymix CMS Detect', 'description': 'Detects Rhymix CMS', 'author': 'KittySploit Team...

BMC Discovery Outpost Admin Panel - Detect

BMC Discovery Outpost admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery Outpost admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Outpost Admin...

Apache NiFi detect

Detects Apache NiFi detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache NiFi detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache NiFi detect', 'description': 'Detects Apache NiFi...

Nortek Linear eMerge Panel - Detect

Nortek Linear eMerge panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nortek Linear eMerge panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nortek Linear eMerge Panel -...

Database Error Detection

Detects Database Error. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Database Error.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Database Error Detection', 'description': 'Detects Database Error.',...

AWS EC2 Auto Scaling Lab Detection

Detects AWS EC2 Auto Scaling Lab. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AWS EC2 Auto Scaling Lab.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS EC2 Auto Scaling Lab Detection', 'description':...