CVE-2026-65624

creationtimestamp| type| source ---|---|--- 2026-07-28 12:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpeqdtkvn2q...

CVE-2026-58246

creationtimestamp| type| source ---|---|--- 2026-07-28 11:57:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpe7pcpbp2q...

CVE-2026-8167

creationtimestamp| type| source ---|---|--- 2026-07-28 11:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdyyeigg2s...

CVE-2026-14328

creationtimestamp| type| source ---|---|--- 2026-07-28 11:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdiqtrku23...

CVE-2026-11598

creationtimestamp| type| source ---|---|--- 2026-07-28 11:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22...

CVE-2026-9680

creationtimestamp| type| source ---|---|--- 2026-07-28 11:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcypa3cy2a...

CVE-2026-14516

creationtimestamp| type| source ---|---|--- 2026-07-28 11:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcvdklcz23...

Intelbras WIN 300/WRN 342 - Credentials Disclosure Detection

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. !/usr/bin/env python3 -- coding: utf-8 -- """Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers t...

WAVLINK WN533A8 - Improper Access Control Detection

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

WAVLINK WN530HG4 - Improper Access Control Detection

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd and thereby possibly obtain sensitive information, modify data, and/or execute...

.gitmodules File Exposed Detection

The .gitmodules file was exposed on the web server as part of an accessible .git directory.This exposure indicated a misconfiguration that could have allowed attackers to explore the .git directory further and potentially reconstruct or download the full source code repository. !/usr/bin/env...

IBM WebSphere Application - Source File Exposure Detection

Disclose application specific files contained within the war file, including files under the web-inf and meta-inf directories. !/usr/bin/env python3 -- coding: utf-8 -- """Disclose application specific files contained within the war file, including files under the web-inf and meta-.""" from...

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion Detection

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

Astro - Information Disclosure Detection

Astro versions v5.0.3 through v5.0.7 and Astro v4.16.17 or older with sourcemaps enabled contain a source code disclosure caused by sourcemap files being publicly accessible in the build output folder, letting unauthenticated users read server source code, exploit requires sourcemaps to be enable...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

React / Vite Dev Server Exposure Detection

Detects development-mode React tooling left reachable Vite client, React Refresh, webpack HMR / sockjs which often leaks source and enables SSRF. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React/Vite/webpack development servers exposed to the network.""" from kittysploit import from...

Remita Merchant ID & API Key - Exposure Detection

Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuration files, or publicly accessible assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuratio...

Vugex Framework Source Code - Detect

Detects the presence of exposed Vugex Framework source code by identifying common files and directories associated with the framework. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of exposed Vugex Framework source code by identifying common files and directories associ."""...