CVE-2026-94214

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94214

ST Engineering iDirect Evolution and Velocity WebServer Evolution (versions up to 20260717 ) contain an open redirect vulnerability in the Management Service component, specifically in the /login.html file. The root cause is unsanitized manipulation of the Host argument, allowing a remote attacke...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

YzmCMS Login Panel - Detect

YzmCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """YzmCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YzmCMS Login Panel - Detect', 'description': 'YzmCMS logi...

SuperVPN Login Panel - Detect

SuperVPN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SuperVPN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SuperVPN Login Panel - Detect', 'description':...

Adobe Experience Manager Forms - Panel Detection

Adobe Experience Manager Forms was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager Forms was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Experience Manager Form...

Fortinet FortiSIEM - Panel Detection

FortiSIEM login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FortiSIEM login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet FortiSIEM - Panel Detection',...

Enablix Panel - Detect

Enablix panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Enablix panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Enablix Panel - Detect', 'description': 'Enablix panel was...

Versa SD-WAN Login Panel - Detect

Versa SD-WAN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Versa SD-WAN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa SD-WAN Login Panel - Detect',...

SecNet Login Panel - Detect

SecNet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecNet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecNet Login Panel - Detect', 'description': 'SecNet logi...

CVE-2026-29933: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header...

CVE-2026-2971 a466350665 Smart-SSO Login login.html cross site scripting

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. T...

CVE-2026-2971: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. T...

CVE-2022-4984: Improper Neutralization of Special Elements used in an SQL Command

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

EUVD-2015-9091

Malware in sbrugna...

EUVD-2010-5293

Malware in sbrugna...

CVE-2025-9310: Use of Hard-coded Credentials

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRentalwar/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack ma...

CVE-2023-49111: Improper Neutralization of Input During Web Page Generation

For Kiuwan installations with SSO single sign-on enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "login.html". This is possible due to the request parameter "message" values being directly included in a JavaScript block in the response. This is...

PT-2024-13677

Name of the Vulnerable Software and Affected Versions Kiuwan SAST version Description The issue allows for an unauthenticated reflected cross-site scripting attack on the login page "login.html" when SSO single sign-on is enabled. This is due to the message request parameter values being directly...