Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversal Detection

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1."...

Gogs (Go Git Service) - SQL Injection Detection

Multiple SQL injection vulnerabilities in Gogs aka Go Git Service 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to 1 api/v1/repos/search, which is not properly handled in models/repo.go, or 2 api/v1/users/search, which is...

WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

Netsweeper 4.0.4 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in remotereporter/loadlogfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

Webmin <= 1.920 - Unauthenticated Remote Command Execution Detection

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin =1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WebPort 1.19.1 - Cross-Site Scripting Detection

Web Port 1.19.1 is vulnerable to cross-site scripting via the /log type parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Web Port 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WebPort 1.19.1 - Cross-Site...

AudioCodes Device Manager Express - SQL Injection Detection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in AudioCodes Device Manager Express through 7."...

Reflected Odoo - Open Redirect Detection

Detected an open redirect vulnerability in Odoo where the redirect parameter in web/login was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Odoo where the...

WordPress Oxygen-Theme - Local File Inclusion Detection

WordPress Oxygen-Theme has a local file inclusion vulnerability via the 'file' parameter of 'download.php'. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Oxygen-Theme has a local file inclusion vulnerability via the 'file' parameter of 'download.""" from kittysploit import from...

WordPress PHPFreeChat 0.2.8 - Cross-Site Scripting Detection

WordPress PHPFreeChat 0.2.8 plugin contains a cross-site scripting vulnerability via the url parameter. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...

ZendFramework 1.12.2 - Cross-Site Scripting Detection

ZendFramework of versions =1.12.2 contain a cross-site scripting vulnerability via an arbitrarily supplied parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ZendFramework of versions =1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

TinyTiny RSS Open Redirect Detection

Detected an open redirect vulnerability in Tiny Tiny RSS where the return parameter in public.php was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Tiny Tiny RS...

Xerox DC260 EFI Fiery Controller Webtools 2.0 - Local File Inclusion Detection

Xerox DC260 EFI Fiery Controller Webtools 2.0 is vulnerable to local file inclusion because input passed thru the 'file' GET parameter in 'forceSave.php' script is not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files ...

WordPress SocialFit - Cross-Site Scripting Detection

WordPress SocialFit is vulnerable to a cross-site scripting vulnerability via the 'msg' parameter because it fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress SocialFit is vulnerable to a cross-site scripting vulnerability via the 'msg' paramet...

Heimdall Application Dashboard < 2.7.3 - Reflected XSS Detection

LinuxServer.io Heimdall 2.7.3 contains a stored XSS caused by improper sanitization of the "q" parameter, letting remote attackers execute scripts, exploit requires crafted input. !/usr/bin/env python3 -- coding: utf-8 -- """LinuxServer.""" from kittysploit import from...

Zoo Management System 1.0 - SQL Injection Detection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

EPP Server - Local File Inclusion Detection

servlet called "CitiesServlet" that handles HTTP GET requests, so the user-provided input, obtained from the country parameter, is directly concatenated with the "/cities/cities" string to form the fileName, This means an attacker can manipulate the country parameter and potentially access...

YesWiki Bazar Widget - Reflected XSS via 'id' Parameter Detection

YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. striptags does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki...

Puppeteer Renderer - Directory Traversal Detection

puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. !/usr/bin/env python3 -- coding: utf-8 -- """puppeteer-renderer v.""" import re from kittysploit import from...