PrivateGPT < 0.5.0 - Open Redirect Detection

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. !/usr/bin/env python3 -- codin...

IceWarp Server 10.2.1 - Cross-Site Scripting Detection

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting XSS via the meta parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Server 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IceWarp Server...

MasterSAM Star Gate v11 - Local File Inclusion Detection

MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of sensitive information...

DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting Detection

DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitization of the 'q' parameter, letting remote attackers execute arbitrary scripts, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """DokuWiki 2025-05-14a 'Librarian' contains a stored...

Personal Weather Station Dashboard 12 - Directory Traversal Detection

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. !/usr/bin/env python3 -- coding: utf-8 -- """Person...

Dashy <= 4.3.6 - Reflected XSS via Workspace Detection

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

WordPress AcyMailing <7.5.0 - Open Redirect Detection

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting Detection

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Jannah theme...

WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting Detection

WorsPress Spider Calendar plugin through 1.5.65 is susceptible to cross-site scripting. The plugin does not sanitize and escape the callback parameter before outputting it back in the page via the window AJAX action, available to both unauthenticated and authenticated users. An attacker can injec...

LISTSERV 17 - Cross-Site Scripting Detection

LISTSERV 17 web interface contains a cross-site scripting vulnerability. An attacker can inject arbitrary JavaScript or HTML via the "c" parameter, thereby possibly allowing the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding:...

BentoML v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 ...

Academy LMS 6.2 - Cross-Site Scripting Detection

A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument...

XWiki < 14.10.14 - Cross-Site Scripting Detection

XWiki is vulnerable to reflected cross-site scripting RXSS via the rev parameter that is used in the content of the content menu without escaping. If an attacker can convince a user to visit a link with a crafted parameter, this allows the attacker to execute arbitrary actions in the name of the...

Joomla Solidres 2.13.3 - Cross-Site Scripting Detection

Joomla extension for Solidres - Online Booking System & Reservation Software is vulnerable to XSS in GET parameter 'show'. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla extension for Solidres - Online Booking System & Reservation Software is vulnerable to XSS in GET param.""" from kittysplo...

QiHang Media Web (QH.aspx) Digital Signage 3.0.9 - Arbitrary File Disclosure Detection

The QiHang Media Web application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to...

SIAM 2.0 - Cross-Site Scripting Detection

A Reflected Cross-Site Scripting XSS vulnerability has been identified in the SIAM Invitation application. The url parameter of the qrcode.jsp page does not properly sanitize user input, allowing the injection and execution of malicious scripts in the browser. !/usr/bin/env python3 -- coding: utf...

mTheme Unus < 2.3 - Directory Traversal Detection

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. !/usr/bin/env python3 -- coding: utf-8 -- """The mTheme-Unus theme for...

WordPress RobotCPA 5 - Directory Traversal Detection

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. !/usr/bin/env python3 -- coding: utf-8 -- """The RobotCPA plugin 5 for WordPress has directory traversal via the f.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion Detection

SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. dot dot in the path parameter to /Catalog, aka SAP Security Note 2230978. !/usr/bin/env python3 -- coding: utf-8...

Fortinet FortiOS - Open Redirect/Cross-Site Scripting Detection

FortiOS Web User Interface in 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting attacks via the "redirect" parameter to "login." !/usr/bin/env python3 -- coding: utf...