519 matches found
CVE-2026-26417: Improper Access Control
A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...
CVE-2026-26418
Tata Consultancy Services Cognix Recon Client v3.0 is vulnerable to a flaw where the Web API layer fails to enforce proper authentication and authorization controls. This missing validation (categorized under CWE-306 and CWE-862 ) allows remote attackers to access various application functions wi...
CVE-2026-26417
A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...
CVE-2026-26416
An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...
CVE-2026-26418
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
CVE-2026-26418: Improper Access Control
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
CVE-2026-26418
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
CVE-2026-26417
The Tata Consultancy Services Cognix Recon Client v3.0 contains a broken access control vulnerability in its password reset functionality. Authenticated users can reset passwords for arbitrary user accounts by submitting crafted API requests to the endpoint http://clientreconhost/trapeze-client/p...
Kestrel
Kestrel LLM-Assisted Bug Bounty Hunting Platform for Kali L...
DNS Recon
Retrieves A, MX, NS records using DNS resolver. from kittysploit import import dns.resolver class ModuleAuxiliary: info = 'name': 'DNS Recon', 'author': 'KittySploit Team', 'description': 'Retrieves A, MX, NS records using DNS resolver.', 'tags': 'osint', 'passive', 'dns', target = OptString"",...
gotham-recon
Documentation Complete du Systeme d'Agents CrewAI Guide t...
PT-2025-132: Server-side Request Forgery (SSRF) in OpenPDF
The vulnerability was identified in OpenPDF, versions 2.0.3. The discovered vulnerability allows an attacker craft arbitrary HTTP requests that the vulnerable server will send to both external services and internal network endpoints. By exploiting this, the attacker can exfiltrate sensitive data...
📄 dotCMS 24.04.24 Vulnerability Scanner
dotCMS version 24.04.24 advanced exploitation python scanning script that looks for local file inclusion, data exposure, SQL injection, and more. ============================================================================================================================================= | Title :...
Exploit for Deserialization of Untrusted Data in Facebook React
⚡ CVE-2025-55182 – Auto Exploit Toolkit Precision Engine...
Dump CAN Messages
Dumps CAN messages from one CANBUS session or sibling sessions to file !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Dumper - Dumps CAN messages from a session to file Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...
CVE-2025-63551
A Server-Side Request Forgery (SSRF) vulnerability exists in MetInfo Content Management System (CMS) versions through 8.1 due to a defect in the XML parsing logic . An attacker can exploit this via an XML External Entity (XXE) injection to force the server to initiate HTTP requests to arbitrary i...
EUVD-2018-13295
Malware in sbrugna...
EUVD-2021-16072
Malware in sbrugna...
CVE-2025-34225
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a server-side request forgery SSRF vulnerability. The consolerelease directory is reachable from the internet without any authentication. Insi...