PHP-FPM Configuration Page - Detect

PHP-FPM configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-FPM configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Configuration Page - Detect',...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS Detection

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php v2.""" from...

MapTiler Tileserver-php v2.0 - Unauthenticated File Read Detection

MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitization of GET parameters in renderTile function, letting attackers read arbitrary files on the server, exploit requires crafted web requests !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php...

PHP CGI - Argument Injection Detection

PHP CGI - Argument Injection CVE-2024-4577 is a critical argument injection flaw in PHP. !/usr/bin/env python3 -- coding: utf-8 -- """PHP CGI - Argument Injection CVE-2024-4577 is a critical argument injection flaw in PHP.""" from kittysploit import from lib.protocols.http.httpclient import...

GLPI - Directory Listing and Session Exposure Detection

Detected GLPI directory listing exposed sensitive files and PHP session data, potentially allowing session hijacking or information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected GLPI directory listing exposed sensitive files and PHP session data, potentially allowing session...

MAMP - PHP Info Exposure Detection

Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and envi.""" from...

MajorDoMo - Unauthenticated RCE Detection

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """MajorDoMo contains a remote...

elFinder 2.1.58 - Remote Code Execution Detection

elFinder 2.1.58 is vulnerable to remote code execution. This can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. !/usr/bin/env python3 -- coding: utf-8 -- """elFinder 2.""" from kittysploit import from...

Generic PHP Backup Information Disclosure Detection

Generic php file source code was detected via backup files. !/usr/bin/env python3 -- coding: utf-8 -- """Generic php file source code was detected via backup files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

PHPJabbers Taxi Booking 2.0 - Cross Site Scripting Detection

A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack can be launched remotely. !/usr/bin/env python3 ...

Graphql PHP Detect

Detects Graphql PHP Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql PHP Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql PHP Detect', 'description': 'Detects Graphql PHP Detect.',...

WordPress Contact Form - Full Path Disclosure Detection

WordPress Contact Form plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form plugin files are publicly accessible without...

WordPress Events Manager - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

PHP LDAP Admin Panel - Detect

Detects PHP LDAP Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP LDAP Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP LDAP Admin Panel - Detect', 'description'...

CVE-2026-63302 Local File Inclusion in Quick.CMS

Quick.CMS is vulnerable to Local File Inclusion LFI in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application's directory structure via a crafted HTTP request. Successful exploitation allows disclosure...

BIT-THRIFT-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Jeg Kit for Elementor versions = 3.2.10...

CVE-2026-56722: Improper Input Validation

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...

CVE-2026-55555: Observable Discrepancy

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

CVE-2026-59943: Generation of Error Message Containing Sensitive Information

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...