11729 matches found
PT-2026-24949
In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being...
PT-2026-36417
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where auto counter reload may include a group of events containing software events. Because the software event PMU is not the x86 hybrid pmu, a containe...
Monitoring and diagnostic tools Windows Privilege Exploitation
The vulnerability of the performance monitoring and diagnostic tools of the Windows operating system’s Performance Counters is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to enhance their privileges...
WellChoose IFTOP security vulnerabilities
WellChoose IFTOP is a command-line network traffic monitoring tool for collecting network traffic statistics from WellChoose, a company based in Taiwan, China. WellChoose IFTOP has a security vulnerability caused by reflective cross-site scripting. This vulnerability could allow authenticated...
ThermaKube security vulnerabilities
ThermaKube is a Kubernetes cluster monitoring and visualization tool released as a beta version by Open Source Labs. There is a security vulnerability in ThermaKube, which stems from the use of hard-coded passwords...
net.sf.itcb.addons.monitoring:itcb-monitoring-track (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (6.5.7)
com.vaadin:vaadin MAVEN version 6.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - net.sf.itcb.addons.monitoring:itcb-monitoring-track =0.0.1, =0.0.3 Source cves: CVE-2026-2742 Source advisory:...
net.sf.itcb.addons.monitoring:itcb-monitoring-track (0.1.0), net.sf.itcb.common:itcb-common-portlet (>=0.6.0-rc7, <=0.6.0-rc9) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (6.7.1)
com.vaadin:vaadin MAVEN version 6.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - net.sf.itcb.addons.monitoring:itcb-monitoring-track 0.1.0 - net.sf.itcb.common:itcb-common-portlet =0.6.0-rc7, =0.6.0-rc9...
CVE-2026-30928
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file glances.conf via self.config.asdict with no filtering of sensitive values. The configuration file contains credentials for all...
CVE-2026-30930
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize method wraps string values in single quotes but does not escape embedded single...
PT-2026-28859
Уязвимость программного обеспечения энергомониторинга EcoStruxure Power Monitoring Expert связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation (Schneider Electric EPO) code-related vulnerabilities
Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Power Monitoring Expert is a device used for power distribution monitoring in...
netlink Heap Buffer Overflow DoS
The vulnerability of the genlbind function in the net/netlink/genetlink.c module, which is part of the NETLINK interface support for Linux kernel monitoring, is related to incorrect handling of permissions. Exploiting this vulnerability could allow an attacker to cause a service failure...
Grafana detection
Detects if Grafana is installed on the target. !/usr/bin/env python3 -- coding: utf-8 -- """Détection Grafana.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Grafana detection", "description": "Detects if Grafana is...
Kibana detection
Detects if Kibana is installed on the target. !/usr/bin/env python3 -- coding: utf-8 -- """Détection Kibana.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Kibana detection", "description": "Detects if Kibana is...
New Social Security Scam Emails Use Fake Tax Documents to Hijack PCs
A new phishing campaign is targeting thousands in the US by posing as the Social Security Administration. Learn how scammers use fake 2025/2026 tax statements and Datto RMM software to hijack computers and steal data, as shared with Hackread.com...
CVE-2026-29779
UptimeFlare (serverless uptime monitoring using Cloudflare Workers) had server-only configuration, workerConfig, exported from the same module as safe client data. Prior to commit 377a596, pages/incidents.tsx imported workerConfig into a client-side component, causing the entire workerConfig obje...
CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle
UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...
EUVD-2026-10152
UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...
EUVD-2026-10117
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url...
