CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives HVM/PVH: HAP, PV: shim are commonly available, the decision was to deprecate the functionality, while still retainin...

CVE-2026-7187

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-49769

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

White Star Software ProTop - Directory Traversal Detection

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. !/usr/bin/env python3 -- coding:...

Cisco SD-WAN vManage Software - Local File Inclusion Detection

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco SD-WAN vManage Software in the application data...

FlexNet Operations Panel - Detect

FlexNet Operations was detected — a software monetization platform. !/usr/bin/env python3 -- coding: utf-8 -- """FlexNet Operations was detected — a software monetization platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

YSoft SafeQ Panel - Detect

The YSoft SafeQ panel is umbrella printer management software used by many printer vendors. This should not be exposed to the public internet. !/usr/bin/env python3 -- coding: utf-8 -- """The YSoft SafeQ panel is umbrella printer management software used by many printer vendors.""" from kittysplo...

SysAid Login Panel - Detect

Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login pages, favicon hash, and system-specific content. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of a SysAid Help Desk Software login panel by identifying characteristic login...

Virtua Software Panel - Detect

Virtua Software panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Virtua Software panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Virtua Software Panel - Detect', 'description':...

PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting Detection

A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier...

Duplicator < 1.4.7.1 - Information Disclosure Detection

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. !/usr/bin/env python3 -- coding: utf-8 -- """The Duplicator WordPress plugin before...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect Detection

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. !/usr/bin/env python3 -- coding: utf-8 -- """Polarisft Intellect Core Banking Software Version 9.""" import re from...

Cisco Smart Software Manager On-Prem Panel - Detect

Cisco Smart Software Manager On-Prem is an on-premises software license management solution offered by Cisco. It enables organizations to manage and optimize their Cisco software licenses, entitlements, and usage in their local data centers, providing greater control and visibility over software...

Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion Detection

Portal do Software Publico Brasileiro i3geo 7.0.5 is vulnerable to local file inclusion in the component codemirror.php, which allows attackers to execute arbitrary PHP code via a crafted HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo 7."""...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal Detection

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. !/usr/bin/env python...

FastCGI Echo Endpoint Script - Detect

FastCGI echo endpoint script was detected, which lists several kinds of sensitive information such as port numbers, server software versions, port numbers, and IP addresses. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI echo endpoint script was detected, which lists several kinds of...

Reprise License Manager 14.2 - Information Disclosure Detection

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostnames, system architecture and file/directory...