CVE-2026-115917 vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowedorigins set to a wildcard by default. A malicious web page can use a victim's browser to reach an unauthenticated vLLM server on...

CVE-2026-115917 vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowedorigins set to a wildcard by default. A malicious web page can use a victim's browser to reach an unauthenticated vLLM server on...

EUVD-2026-110038

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowedorigins set to a wildcard by default. A malicious web page can use a victim's browser to reach an unauthenticated vLLM server on...

CVE-2026-82388

bthfphfconnect in subsys/bluetooth/host/classic/hfphf.c allocates the per-connection HFP Hands-Free object with hfphfcreate, which starts an SDP discovery by passing the object's embedded hf-sdpparam to btsdpdiscover. That call links the caller-owned parameter block into the SDP client's request...

CVE-2026-82389

In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfpagcreate in subsys/bluetooth/host/classic/hfpag.c starts an SDP discovery toward the peer, which links the embedded ag-sdpparam.node into the SDP client's pending request list in subsys/bluetooth/host/classic/sdp.c. If the...

CVE-2013-10077

A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/server/ajax/settings.py of the component API Key Handler. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been mad...

EUVD-2026-110033

Burrito is a Terraform Automation Collaboration Software TACoS Kubernetes operator. Prior to 0.13.0, POST /api/webhook accepts unsigned GitHub and GitLab events when a TerraformRepository's credentials omit webhookSecret or set it to an empty value, including credentials configured for git...

CVE-2026-102649 Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset

Burrito is a Terraform Automation Collaboration Software TACoS Kubernetes operator. Prior to 0.13.0, POST /api/webhook accepts unsigned GitHub and GitLab events when a TerraformRepository's credentials omit webhookSecret or set it to an empty value, including credentials configured for git...

CVE-2026-102649 Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset

Burrito is a Terraform Automation Collaboration Software TACoS Kubernetes operator. Prior to 0.13.0, POST /api/webhook accepts unsigned GitHub and GitLab events when a TerraformRepository's credentials omit webhookSecret or set it to an empty value, including credentials configured for git...

Get Session Storage

Extract all data from sessionStorage on the hooked origin BeEF getsessionstorage from kittysploit import import json class ModuleBrowserAuxiliary: info = "name": "Get Session Storage", "description": "Extract all data from sessionStorage on the hooked origin BeEF getsessionstorage", "author":...

Fortinet FortiSandbox CVE-2026-39808 OS command injection

CVE-2026-39808 FortiSandbox 4.4.0–4.4.8: unauthenticated OS command injection via the jid query parameter on /fortisandbox/job-detail/tracer-behavior. Output is written to /web/ng/test.txt and retrieved over HTTP. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiSandbox CVE-2026-39808...

OP5 Monitor CVE-2025-34115 Detect

Detects OP5 Monitor / ITRS login surface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OP5 Monitor / ITRS login surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "OP5 Monitor CVE-2025-34115 Detect",...

PDF.js CVE-2024-4367 Detect

Detects PDF.js viewer bundles on web apps. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PDF.js viewer bundles on web apps.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "PDF.js CVE-2024-4367 Detect",...

pyLoad CVE-2023-0297 Detect

Fingerprints pyLoad UI and /flash/addcrypted2 endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """pyLoad CVE-2023-0297 /flash/addcrypted2 js2py surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "pyLoad...

SQLPad CVE-2022-0944 Detect

Detects SQLPad web console. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SQLPad web console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "SQLPad CVE-2022-0944 Detect", "description": "Detects SQLPad web...

Apache Struts2 CVE-2024-53677 Upload Detect

Probes common Struts file-upload .action endpoints for CVE-2024-53677 chain. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts2 CVE-2024-53677 file upload action fingerprint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Webmin CVE-2019-12840 Detect

Detects Webmin / Usermin login. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Webmin / Usermin login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Webmin CVE-2019-12840 Detect", "description": "Detects Webm...

WordPress Beaver Builder CVE-2026-92084 detect

Detects Beaver Builder Lite = 2.11.0.5 CVE-2026-92084: Sidebar module widget output may execute registered shortcodes via layout-wide doshortcode. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Beaver Builder Lite CVE-2026-92084 exposure.""" from kittysploit import from...

WordPress 3D FlipBook CVE-2025-58226 sensitive data dump

CVE-2025-58226 ≤ 1.16.16: unauthenticated admin-ajax actions fb3dsendposts and fb3dsendpost expose all flipbook posts including password-protected, metadata, and backing PDF/media URLs. Read-only information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2025-58226 — 3D FlipBook...

UnrealIRCd CVE-2010-2075 backdoor RCE

CVE-2010-2075: trojaned UnrealIRCd 3.2.8.1 executes any line starting with AB; as shell via system without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """UnrealIRCd CVE-2010-2075 trojaned backdoor AB; command execution.""" from future import annotations import socket import time fro...