115476 matches found
Oracle Application Server Containers Detection
Detects Oracle Application Server Containers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server Containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...
Dify Panel Detection
Detects Dify LLM application platform panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Dify LLM platform panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Dify Panel Detection", "description": "Detect...
Gitea - User Enumeration Detection
Enumerates the users registered in the Gitea web application, a self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerates the users registered in the Gitea web...
Apache Spark Application UI - Exposed Detection
Detects exposed PySparkShell Application UI by Apache Spark on port 4040. The UI should not be exposed to the internet as it may leak sensitive job and cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed PySparkShell Application UI by Apache Spark on port 4040.""" fr...
Application Management Panel - Detect
Application Management Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Application Management Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Application Management Panel - Detect...
Apache Struts - ShowCase Application Exposure Detection
Apache Structs ShowCase Application is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Structs ShowCase Application is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts - ShowCase...
Codeigniter Application Installer Exposure Detection
Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from...
Azure Instrumentation Key - Exposure Detection
Detected exposed Azure Application Insights Instrumentation Keys classic ikey format in HTTP responses, which allowed anyone to send telemetry data and, in some older configurations, could enable read access via undocumented or legacy APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...
Sangfor Next Gen Application Firewall - Arbitary File Read Detection
Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file .""" import re from...
Spring Boot `X-Application-Context` Header Exposure Detection
Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...
CVE-2026-63301 Denial of Service in Quick.CMS
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
CVE-2026-63301
In Quick.CMS, the language-deletion API endpoint lacks server-side authorization, allowing an authenticated administrator to delete the primary language via a direct request and cause application DoS. When combined with CSRF (CVE-2026-1468), an unauthenticated attacker can craft a malicious link ...
EUVD-2026-49754
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
EUVD-2026-49738
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
Exploit for Insertion of Sensitive Information into Log File in Ayesa Ibermatica_Rps
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security...
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a security bypass vulnerability
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a security bypass vulnerability CVE-2026-10842 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...
SafeLine v9.3.11
SafeLine - Make your web apps secure ๐ Website | ๐ Docs | ๐ Live Demo | ๐โโ๏ธ Discord | ไธญๆ็ ๐ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
EUVD-2021-34855
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...
CVE-2026-14446: Missing Authentication for Critical Function
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console...