91402 matches found
CVE-2026-21550: Improper Input Validation
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-20474: Time-of-check Time-of-use (TOCTOU) Race Condition
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...
CVE-2026-20477: Out-of-bounds Write
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...
CVE-2026-20473: Use After Free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...
CVE-2026-20496: Out-of-bounds Read
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132...
CVE-2026-2346: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2026...
PostgreSQL Empty Password
Tests common PostgreSQL usernames for trust or empty-password login via psycopg2. Authorized targets only. !/usr/bin/env python3 -- coding: utf-8 -- """Detect PostgreSQL trust / empty-password access.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...
augustus v0.14.13
Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...
Exploit for CVE-2026-13714
CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...
Exploit for Improper Access Control in Ollyo Helix3
CVE-2026-49049 Mass Scanner Mass vulnerability scanner for CV...
SecureAI-Scan v0.7.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
CVE-2026-18577: Authentication Bypass Using an Alternate Path or Channel
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...
CVE-2026-18556: Authentication Bypass Using an Alternate Path or Channel
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1...
nikto v2.6.1
nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...
MAL-2026-11467 Malicious code in iac-scanner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90ccff89d665d28ad35ad8c285427a56af2c0d5862b432a7de604a99a0358d9 lib/report.js imports childprocess, fs, https, and os, collects host identity via os.hostname and os.userInfo, executes local commands via execSync,...
Malicious code in iac-scanner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90ccff89d665d28ad35ad8c285427a56af2c0d5862b432a7de604a99a0358d9 lib/report.js imports childprocess, fs, https, and os, collects host identity via os.hostname and os.userInfo, executes local commands via execSync,...
Malicious Package
Overview iac-scanner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
A resource exhaustion vulnerability was found in the Kernel Same-page Merging KSM subsystem of the Linux kernel. When scanning processes with large sparse virtual memory mappings e.g., 32 TiB with one mapped page, ksmd inefficiently walks every address rather than skipping unmapped holes. This...
SSH Host Key
Retrieves the SSH host key type and MD5/SHA256 fingerprints NSE ssh-hostkey. Requires Paramiko. !/usr/bin/env python3 -- coding: utf-8 -- """SSH host key fingerprints NSE ssh-hostkey.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...