Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion Detection

Patreon WordPress before version 1.7.0 is vulnerable to unauthenticated local file inclusion that could be abused by anyone visiting the site. Exploitation by an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the...

CSE Bookstore 1.0 - SQL Injection Detection

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database. !/usr/bin/env python3 -- coding: utf-8 --...

KevinLAB BEMS 1.0 - SQL Injection Detection

KevinLAB BEMS 1.0 contains a SQL injection vulnerability. Input passed through inputid POST parameter in /http/index.php is not properly sanitized before being returned to the user or used in SQL queries. An attacker can possibly obtain sensitive information from a database, modify data, and...

DataEase <= 2.4.1 - Sensitive Information Exposure Detection

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. !/usr/bin/env python3...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

Icinga Web 2 - Arbitrary File Disclosure Detection

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. !/usr/bin/env python3 --...

XWiki < 4.10.20 - Remote code execution Detection

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

Spring Boot H2 Database - Remote Command Execution Detection

Spring Boot H2 Database is susceptible to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot H2 Database is susceptible to remote code execution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection Detection

The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...

Ecology - Information Exposure Detection

The "ecology" component exposes a file that contains sensitive database credentials dbuser/dbpass. !/usr/bin/env python3 -- coding: utf-8 -- """The "ecology" component exposes a file that contains sensitive database credentials dbuser/dbpass.""" from kittysploit import from...

Hongfan OA udfmr.asmx - SQL injection Detection

There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be exploited by attackers to obtain sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """There is a SQL injection vulnerability in Hongfan iOffice 10 Hospital Edition, which can be...

Metabase Installer - Exposure Detection

Detected Metabase installer page, allowing unauthorized database setup and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Metabase installer page, allowing unauthorized database setup and configuration.""" from kittysploit import from lib.protocols.http.httpclient import...

Marqo Vector Search Engine - Detect

Marqo vector search engine was detected. Marqo is an open-source tensor search and vector database that combines vector search with filtering and text/image search for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Marqo vector search engine was detected.""" from kittysploit import...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/user-login.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

Odoo - Unprotected Database Detection

The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access. !/usr/bin/env python3 -- coding: utf-8 -- """The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized ac.""" from kittysploit impo...

CVE-2026-58331

A flaw was found in the Moodle Database Activity module. This vulnerability allows an attacker to perform an arbitrary file read through the module's import feature. This could lead to the disclosure of sensitive information from the system...

CVE-2026-14785 Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection

The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the 'levels' parameter in all versions up to, and including, 1.7.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

EUVD-2026-49734

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...

CVE-2026-16462 SQL injection via unauthenticated GetGridData endpoint

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands...

CVE-2026-16462 SQL injection via unauthenticated GetGridData endpoint

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands...