IBM MQ Web Console Login Panel - Detect

IBM MQ Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM MQ Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM MQ Web Console Login Panel -...

Fortinet FortiAnalyzer - Login Panel Detection

Fortinet FortiAnalyzer is a centralised log management and analytics platform for Fortinet security devices. The web management console is commonly internet-exposed on ports 443, 10443, 9443, or 4443. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiAnalyzer is a centralised log...

H2 Console Web Login Panel - Detect

H2 Console Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """H2 Console Web login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'H2 Console Web Login Panel - Detect',...

HAL Management Console Panel Detection

HAL Management Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HAL Management Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HAL Management Consol...

3CX Phone System Web Client Management Console - Panel Detect

3CX Phone System Web Client Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Web Client Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Pentaho User Console Login Panel - Detect

Pentaho User Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pentaho User Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pentaho User Console Login...

Pulsar Admin Console Panel - Detect

Pulsar admin console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin Console Panel - Detect',...

3CX Phone System Management Console - Panel Detect

3CX Phone System Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Phone...

QuestDB Console - Detect

QuestDB console was detected. !/usr/bin/env python3 -- coding: utf-8 -- """QuestDB console was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QuestDB Console - Detect', 'description': 'QuestDB console was...

IBM Decision Server Console Panel - Detect

IBM Decision Server Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Decision Server Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Decision Server Console...

Eko Charger Management Console Login Panel - Detect

Eko Charger Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Eko Charger Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Eko Charg...

Apache Karaf Detect

Detects Apache Karaf Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Karaf Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Karaf Detect', 'description': 'Detects Apache Karaf...

Kibana - Local File Inclusion Detection

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

AEM Groovy Console Discovery Detection

An Adobe Experience Manager Groovy console was discovered. This can possibly lead to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """An Adobe Experience Manager Groovy console was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Nacos 1.x - Authentication Bypass Detection

Nacos 1.x was discovered. A default Nacos instance needs to modify the application.properties configuration file or add the JVM startup variable Dnacos.core.auth.enabled=true to enable the authentication function reference: https://nacos.io/en-us/docs/auth.html. But authentication can still be...

Apache ActiveMQ <=5.15.5 - Cross-Site Scripting Detection

Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Apache ActiveMQ versio...

Werkzeug debugger console Detection

Detects Werkzeug debugger console. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Werkzeug debugger console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Werkzeug debugger console Detection', 'description':...

EUVD-2021-34855

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...

CVE-2026-14446: Missing Authentication for Critical Function

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console...

PT-2026-65598

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description The administrative console contains a broken access control issue that allows for privilege escalation. Recommendations At the moment, there ...