Drupal - Source Code Disclosure Detection

Detected exposed Drupal source code, backup files, and sensitive configurations, potentially disclosing database credentials and API keys. This exposure revealed internal system paths and critical site metadata, increasing the risk of full system compromise. !/usr/bin/env python3 -- coding: utf-8...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

SonarQube - Information Disclosure Detection

Information leakage vulnerability in an interface of SonarQube, you can download the source code through the tool. !/usr/bin/env python3 -- coding: utf-8 -- """Information leakage vulnerability in an interface of SonarQube, you can download the source code through the t.""" from kittysploit impor...

React / Vite Dev Server Exposure Detection

Detects development-mode React tooling left reachable Vite client, React Refresh, webpack HMR / sockjs which often leaks source and enables SSRF. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React/Vite/webpack development servers exposed to the network.""" from kittysploit import from...

Vugex Framework Source Code - Detect

Detects the presence of exposed Vugex Framework source code by identifying common files and directories associated with the framework. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of exposed Vugex Framework source code by identifying common files and directories associ."""...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Paystack Secret/Live Key - Exposure Detection

Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

Astro - Information Disclosure Detection

Astro versions v5.0.3 through v5.0.7 and Astro v4.16.17 or older with sourcemaps enabled contain a source code disclosure caused by sourcemap files being publicly accessible in the build output folder, letting unauthenticated users read server source code, exploit requires sourcemaps to be enable...

Remita Merchant ID & API Key - Exposure Detection

Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuration files, or publicly accessible assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuratio...

Microsoft SharePoint - Remote Code Execution Detection

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source mark."...

WAVLINK WN530HG4 - Improper Access Control Detection

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd and thereby possibly obtain sensitive information, modify data, and/or execute...

WAVLINK WN533A8 - Improper Access Control Detection

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

Rstudio Shiny Server <1.5.16 - Local File Inclusion Detection

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """Rstudio Shiny Server prior to 1.""" import re from kittysploit import from...

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion Detection

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

Phalcon Framework - Source Code Leakage Detection

Phalcon Framework source code was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Phalcon Framework source code was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Phalcon Framework - Source Code...

IBM WebSphere Application - Source File Exposure Detection

Disclose application specific files contained within the war file, including files under the web-inf and meta-inf directories. !/usr/bin/env python3 -- coding: utf-8 -- """Disclose application specific files contained within the war file, including files under the web-inf and meta-.""" from...

CVE-2023-3349

creationtimestamp| type| source ---|---|--- 2026-07-28 11:24:32+00:00| seen| https://bsky.app/profile/r-redteamsec.bsky.social/post/3mrpcemldno2q 2026-09-01 20:00:06+00:00| seen| https://t.me/hackingAttack/190060 2026-09-02 01:00:24+00:00| published-proof-of-concept|...

CVE-2026-5326

creationtimestamp| type| source ---|---|--- 2026-07-28 11:02:01+00:00| seen| https://gist.github.com/alon710/7412d8adaff2427de50f99e5817de762...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libXpm: libXpm-3.5.19-4.hum1 aarch64, x8664 libXpm-devel-3.5.19-4.hum1 aarch64, x8664 libXpm-3.5.19-4.hum1.src src Security Fixes: libXpm: CVE-2026-4367...