XWiki Platform - Path Traversal Detection

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform 4.""" from...

DataEase <= 2.4.1 - Sensitive Information Exposure Detection

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. !/usr/bin/env python3...

Redis Configuration File - Detect

Redis configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Redis configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Redis Configuration File - Detect',...

NI Web-based Configuration & Monitoring - Detect

Detects NI Web-based Configuration & Monitoring - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects NI Web-based Configuration & Monitoring - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NI...

Pipeline Configuration Exposure Detection

Detects Pipeline Configuration Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pipeline Configuration Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipeline Configuration Exposure Detection...

Webalizer Log Analyzer Configuration - Detect

Webalizer log analyzer configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webalizer log analyzer configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webalizer Log Analyze...

Travis CI Disclosure Detection

Travis CI is a Software as a Service SaaS based continuous integration service used to build and test software projects. By defining a configuration file named .travis.yml in their source code repositories, developers can customize their applications build workflows. !/usr/bin/env python3 --...

Honeywell Scada Configuration File - Detect

Honeywell Scada configuration file was detected. The downloaded file opens with the file name and contains critical information about the destination address. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Scada configuration file was detected.""" from kittysploit import from...

HP LaserJet Configuration Exposure Detection

HP LaserJet printer web interface exposes sensitive configuration information without authentication.This includes device information, network configuration, SNMP settings, and other sensitive data that could be leveraged for further attacks or network reconnaissance. !/usr/bin/env python3 --...

Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass Detection

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available. !/usr/bin/env python3 -...

FeiYuXing Enterprise Router - Information Leakage Detection

The FeiYuXing Enterprise Router Information Leakage Vulnerability is a critical flaw that allows unauthorized attackers to retrieve sensitive configuration details from the router. !/usr/bin/env python3 -- coding: utf-8 -- """The FeiYuXing Enterprise Router Information Leakage Vulnerability is a...

S3CFG Configuration - Detect

S3CFG configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CFG configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CFG Configuration - Detect', 'description':...

default-wamp-server-page Detection

Wamp default page will expose sensitive configuration and vhosts. !/usr/bin/env python3 -- coding: utf-8 -- """Wamp default page will expose sensitive configuration and vhosts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Detect Springboot autoconfig Actuator

Displays an auto-configuration report showing all auto-configuration candidates and the reason why they 'were' or 'were not' applied. !/usr/bin/env python3 -- coding: utf-8 -- """Displays an auto-configuration report showing all auto-configuration candidates and the reason why they 'were'.""" fro...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Firebase Configuration File - Detect

Firebase configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Firebase configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Firebase Configuration File - Detect',...

CodeKit Configuration Exposure Detection

Detected exposed CodeKit configuration files that may have revealed sensitive project information, including file paths, build settings, hooks, and project structure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed CodeKit configuration files that may have revealed sensitive project...

AppVeyor Configuration Page - Detect

AppVeyor configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AppVeyor configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AppVeyor Configuration Page - Detect',...

Karma Configuration File - Detect

Karma configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Karma configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Karma Configuration File - Detect',...

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File Detection

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...