PT-2026-91879

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

UPS Network Management Card 4 Path Traversal Detection

UPS Network Management Card version 4 suffers from a path traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """UPS Network Management Card version 4 suffers from a path traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Network Management Card FTP Service - Detect

Network Management Card FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Network Management Card FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

CVE-2021-22811

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Uninterruptible Power Supply UP...

CVE-2021-22814

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply UPS using NMC2 including Smart-UPS,...

CVE-2021-22812

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected Products: 1-Phase Uninterruptible Power...

CVE-2024-58310

The CVE-2024-58310 entry describes a path traversal vulnerability in the APC Network Management Card 4. Affected component is the device’s web interface, where manipulating URL parameters allows unauthenticated attackers to read sensitive files (e.g., /etc/passwd) via directory traversal techniqu...

CVE-2024-58310 APC Network Management Card 4 Path Traversal via Directory Traversal

APC Network Management Card 4 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like /etc/passwd by using encoded path...

APC Network Management Card path traversal vulnerability

APC Network Management Card is an APC Network Management Card from APC. A path traversal vulnerability exists in APC Network Management Card, which stems from a path traversal in the URL parameter that could lead to reading sensitive system files...

CVE-2024-58310: Improper Limitation of a Pathname to a Restricted Directory

APC Network Management Card 4 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like /etc/passwd by using encoded path...

EUVD-2018-18983

Malware in sbrugna...

EUVD-2018-18982

Malware in sbrugna...

EUVD-2018-18984

Malware in sbrugna...

EUVD-2021-9949

Malicious code in bioql PyPI...

EUVD-2021-9950

Malicious code in bioql PyPI...

EUVD-2021-9945

Malicious code in bioql PyPI...

EUVD-2023-58290

Malicious code in bioql PyPI...

EUVD-2021-9947

Malicious code in bioql PyPI...

EUVD-2021-9946

Malicious code in bioql PyPI...

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...