CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-49769

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

FlexNet Operations Panel - Detect

FlexNet Operations was detected — a software monetization platform. !/usr/bin/env python3 -- coding: utf-8 -- """FlexNet Operations was detected — a software monetization platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Duplicator < 1.4.7.1 - Information Disclosure Detection

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. !/usr/bin/env python3 -- coding: utf-8 -- """The Duplicator WordPress plugin before...

PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting Detection

A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier...

White Star Software ProTop - Directory Traversal Detection

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. !/usr/bin/env python3 -- coding:...

YSoft SafeQ Panel - Detect

The YSoft SafeQ panel is umbrella printer management software used by many printer vendors. This should not be exposed to the public internet. !/usr/bin/env python3 -- coding: utf-8 -- """The YSoft SafeQ panel is umbrella printer management software used by many printer vendors.""" from kittysplo...

SysAid Login Panel - Detect

Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login pages, favicon hash, and system-specific content. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login...

Virtua Software Panel - Detect

Virtua Software panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Virtua Software panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Virtua Software Panel - Detect', 'description':...

Cisco SD-WAN vManage Software - Local File Inclusion Detection

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco SD-WAN vManage Software in the application data...

Reprise License Manager 14.2 - Information Disclosure Detection

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostnames, system architecture and file/directory...

Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion Detection

Portal do Software Publico Brasileiro i3geo 7.0.5 is vulnerable to local file inclusion in the component codemirror.php, which allows attackers to execute arbitrary PHP code via a crafted HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo 7."""...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal Detection

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. !/usr/bin/env python...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect Detection

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. !/usr/bin/env python3 -- coding: utf-8 -- """Polarisft Intellect Core Banking Software Version 9.""" import re from...

Cisco Smart Software Manager On-Prem Panel - Detect

Cisco Smart Software Manager On-Prem is an on-premises software license management solution offered by Cisco. It enables organizations to manage and optimize their Cisco software licenses, entitlements, and usage in their local data centers, providing greater control and visibility over software...

FastCGI Echo Endpoint Script - Detect

FastCGI echo endpoint script was detected, which lists several kinds of sensitive information such as port numbers, server software versions, port numbers, and IP addresses. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI echo endpoint script was detected, which lists several kinds of...

Interact Software Panel - Detect

Interact Software was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Interact Software was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Interact Software Panel - Detect', 'description': 'Interact...

PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Eko Software Update Panel - Detect

Eko software update panel for embedded systems was detected. An attacker can possibly upload a software image or restart the system. !/usr/bin/env python3 -- coding: utf-8 -- """Eko software update panel for embedded systems was detected.""" from kittysploit import from...