Sony IPELA Engine IP Camera - Hardcoded Account Detection

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.""" from kittysploit import from...

SearXNG - Detect

A SearXNG search engine was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A SearXNG search engine was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SearXNG - Detect', 'description': 'A SearXNG...

SAP HANA XS Engine Admin Login Panel - Detect

SAP HANA XS Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP HANA XS Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP HANA XS Engine...

Cisco Identity Services Engine Admin Login Panel - Detect

Cisco Identity Services Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Wowza Streaming Engine Manager Panel - Detect

Wowza Streaming Engine Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wowza Streaming Engin...

Marqo Vector Search Engine - Detect

Marqo vector search engine was detected. Marqo is an open-source tensor search and vector database that combines vector search with filtering and text/image search for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Marqo vector search engine was detected.""" from kittysploit import...

WordPress AI Engine Plugin - Token Exposure Detection

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.""" import r...

Cisco ISE Admin Login Panel - Detect

Cisco Identity Services Engine ISE admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine ISE admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Docker Container - Misconfiguration Exposure Detection

A Docker container misconfiguration was discovered. The Docker daemon can listen for Docker Engine API requests via three different types of Socket - unix, tcp, and fd. With tcp enabled, the default setup provides un-encrypted and un-authenticated direct access to the Docker daemon. It is...

Mirantis Kubernetes Engine Panel - Detect

Mirantis Kubernetes Engine panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mirantis Kubernetes Engine panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mirantis Kubernetes Engine...

Hasura GraphQL Engine - Remote Code Execution Detection

Hasura GraphQL Engine allows remote unauthenticated users to execute arbitrary SQL statements via the '/v2/query' endpoint aka remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Hasura GraphQL Engine allows remote unauthenticated users to execute arbitrary SQL statements via the...

openvas-scanner v23.50.5

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin AI Engine versions = 3.6.8...

USN-8574-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8570-2 linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

CVE-2026-16418

A flaw was found in Chromium. A stack buffer overflow vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, potentially leading to a complete...

PT-2026-68546

Name of the Vulnerable Software and Affected Versions AI Engine versions prior to 3.6.9 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a...

CVE-2026-48060: Improper Neutralization of Input During Web Page Generation

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting due to the contents of the CSRF cookie...

CakePHP 5.4.1 Released

CakePHP 5.4.1 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.4.1. This is a maintenance release for the 5.4 branch that fixes community reported issues, regressions and a security issue with RateLimitMiddleware. Thank you to yousukezan for reporting th...

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

Source: amazon-inspector 30540a72a722c901403164aeb090ca99999d3be2cc4d9e9f3ad99ef319fc2db2 This package presents itself as an unofficial Facebook Messenger client library, but its exported authentication helpers loginViaAPI, tokensViaAPI, tokens send the caller-supplied Facebook email, password, a...