CVE-2026-13862

An insufficient policy enforcement flaw was found in the Web Authentication Passkeys & Security Keys component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495897416...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

Jakefile Build Configuration - Disclosure Detection

Detected Jakefile build configuration was found to be exposed, potentially having contained sensitive information including database credentials, API keys, and server configurations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Jakefile build configuration was found to be exposed,...

Interswitch Webpay - Credentials Exposure Detection

Exposure of Interswitch Webpay product IDs, MAC keys and access tokens. !/usr/bin/env python3 -- coding: utf-8 -- """Exposure of Interswitch Webpay product IDs, MAC keys and access tokens.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Langflow - Detect

Langflow was detected. Langflow is an open-source visual LLM flow builder built on LangChain, providing a drag-and-drop interface for building AI pipelines and agents. Exposed instances may allow access to AI workflow configurations and API keys. !/usr/bin/env python3 -- coding: utf-8 --...

Adlisting Classified Ads 2.14.0 - Information Disclosure Detection

Information disclosure issue in the redirect responses, When accessing any page on the website, Sensitive data, such as API keys, server keys, and app IDs, is being exposed in the body of these redirects. !/usr/bin/env python3 -- coding: utf-8 -- """Information disclosure issue in the redirect...

XWiki < 4.10.15 - Sensitive Information Disclosure Detection

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...

Elastic Cloud API Key Detection

Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs.""" import re from kittysploit import from...

Dot Credentials - Exposure Detection

Detected the presence of a .credentials file and extracts sensitive authentication tokens, passwords, or API keys. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of a .""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Visual Studio Code MCP Configuration ("mcp.json") Exposure Detection

Detected exposed VS Code MCP Model Context Protocol configuration files mcp.json which may contain sensitive information including API keys, server endpoints, authentication tokens, and tool configurations for AI assistants and language models. !/usr/bin/env python3 -- coding: utf-8 -- """Detecte...

SSH Authorized Keys File - Detect

SSH authorized keys file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SSH authorized keys file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SSH Authorized Keys File - Detect',...

Ruby Gem::ConfigFile Credential - Exposure Detection

Ruby Gem credentials file is exposed, potentially leaking RubyGems API keys. The /.gem/credentials file stores authentication tokens for publishing gems to RubyGems.org or private gem servers. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby Gem credentials file is exposed, potentially leaking...

UBUNTU-CVE-2026-58218

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...

UBUNTU-CVE-2026-58222

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

Malicious code in app-soda-layer (npm)

app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...

CVE-2026-15012

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-14490 Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 0.0.7. The vulnerability exists because the plugin stores its HMAC signing key and per-step restore token as dotfiles inside a...

EUVD-2026-49691

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface

Overview Firmware versions 2.7.7 and earlier of the Arris BGW210-700 residential gateway contain an authentication bypass vulnerability, tracked as CVE-2026-16771, that allows any unauthenticated LAN-side user to read sensitive configuration data and modify device settings through web management...

kernel security update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...