GoAnywhere Managed File Transfer Login Panel - Detect

GoAnywhere Managed File Transfer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GoAnywhere Managed File Transfer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WS_FTP Server Web Transfer - Panel Detect

WSFTP Server Web Transfer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP Server Web Transfer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WSFTP Server Web Transfer - Pan...

Web Transfer Client Login Panel - Detect

Progress Web Transfer Client login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Progress Web Transfer Client login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Transfer...

Accellion - Detect

Dectection of Accellion File Transfer Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Dectection of Accellion File Transfer Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accellion - Detect',...

WS-FTP Ad Hoc Transfer Panel - Detect

WSFTP Ad Hoc panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP Ad Hoc panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WS-FTP Ad Hoc Transfer Panel - Detect', 'description':...

FileCatalyst File Transfer Solution - Detect

Detects the presence of FileCatalyst file transfer solution login panel !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of FileCatalyst file transfer solution login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Moveit File Transfer - Detect

Detects Moveit File Transfer - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Moveit File Transfer - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Moveit File Transfer - Detect', 'description'...

CVE-2026-18028

The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed reque...

CVE-2026-18028

The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed reque...

EUVD-2026-49753

The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed reque...

CVE-2026-18028

CVE-2026-18028 describes a missing authorization check in the "+quick setup+" view presented after creating an event. The flaw allows an attacker to send well-timed requests to perform privileged actions on events the user should not access, including creating products, quotas, configuring bank t...

CVE-2026-59248

Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server or client and cause a denial of service. The HPACK and QPACK prefixed-integer decoder cowhpackcommon:decbigint/3 in...

EEF-CVE-2026-65624 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

Summary Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy\http enforces the max\headers limit by counting the number of distinct header...

EUVD-2021-34859

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service...

PT-2026-65522

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

PT-2026-65517

Name of the Vulnerable Software and Affected Versions Rouille versions 0.4.0 through 3.6.2 Description An HTTP response splitting issue exists where remote attackers can inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into input they control. This can...

From Profiling to Parameterization: Physics-Guided Acoustic Eavesdropping Via Smartphone Accelerometers

We present LEAKFORGE, a device-agnostic framework that converts cross-device accelerometer eavesdropping into a physics-guided data-generation problem. Crucially, device-specific leakage is not arbitrary; its dominant variation lies within a constrained family of audio-to-accelerometer transfer...

PT-2026-65525

Name of the Vulnerable Software and Affected Versions Rouille versions 0.3.3 through 3.6.2 Description An HTTP request smuggling issue exists due to improper header forwarding within the proxy implementation located in src/proxy.rs. The proxy forwards the client's Transfer-Encoding header to...

PT-2026-65438

The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed reque...

PT-2026-65623

Name of the Vulnerable Software and Affected Versions goshs versions 2.1.3 through 2.1.3 Description An authentication bypass exists in the SFTP server component when the application is started with a basic authentication string containing a username but an empty password e.g., -b 'admin:', the...