Security update for samba

This update for samba fixes the following issues CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. CVE-2026-58216: 6-byte heap...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

SQLite History - Exposure Detection

Detects exposed .sqlitehistory files. These files contain SQLite command history, including executed queries, table names, and potentially sensitive data that was queried or inserted. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed .""" import re from kittysploit import from...

Odoo - Database Manager Discovery Detection

Odoo database manager was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Odoo database manager was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Database Manager Discovery Detection',...

Exposed Prisma Database Schema - Exposure Detection

Prisma is a modern ORM extremely popular in the Node.js and TypeScript Next.js/Express ecosystems. Developers often accidentally expose the prisma/ folder in web directories during deployments or Docker builds. This template checks for the exposure of the schema.prisma file, which typically...

Oqtane CMS Database - Detect

Detect which database distribution the target oqtane cms use. !/usr/bin/env python3 -- coding: utf-8 -- """Detect which database distribution the target oqtane cms use.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Oracle Database as a Service Detection

Detects Oracle Database as a Service. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Database as a Service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Database as a Service Detection',...

Marqo Vector Search Engine - Detect

Marqo vector search engine was detected. Marqo is an open-source tensor search and vector database that combines vector search with filtering and text/image search for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Marqo vector search engine was detected.""" from kittysploit import...

Springboot Liquidbase API Detection

This liquibase endpoint provides information about database changes !/usr/bin/env python3 -- coding: utf-8 -- """This liquibase endpoint provides information about database changes.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

Ecology OA CheckServer - SQL Injection Detection

Ecology OA system improperly filters incoming data from users, resulting in a SQL injection vulnerability. Remote and unauthenticated attackers can use this vulnerability to conduct SQL injection attacks and steal sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """Ecolog...

OA E-Office mysql_config.ini - Information Disclosure Detection

E-Office mysqlconfig.ini file can be directly accessed, leaking database account password and other information !/usr/bin/env python3 -- coding: utf-8 -- """E-Office mysqlconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

WordPress DB Backup Detection

This template checks for exposed database in wordpress. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for exposed database in wordpress.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress D...

UFIDA U8 CRM cfillbacksetting.php - SQL Injection Detection

UFIDA U8-CRM system /config/fillbacksetting.php contains an SQL injection vulnerability, which allows attackers to manipulate the database through maliciously constructed SQL statements, resulting in data leaks, tampering or destruction, and seriously threatening system security. !/usr/bin/env...

IBM DB2 Database Server - Detect

IBM DB2 Database Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM DB2 Database Server panel was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'IBM...

Symfony Database Configuration File - Detect

Symfony database configuration file was detected and may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony database configuration file was detected and may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Spring Boot H2 Database - Remote Command Execution Detection

Spring Boot H2 Database is susceptible to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot H2 Database is susceptible to remote code execution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

CSE Bookstore 1.0 - SQL Injection Detection

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database. !/usr/bin/env python3 -- coding: utf-8 --...

TCExam <= 14.8.1 - Sensitive Information Exposure Detection

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. !/usr/bin/env python3 -- coding: utf-8 -- """When installed following the default/recommended settings,...

Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion Detection

Patreon WordPress before version 1.7.0 is vulnerable to unauthenticated local file inclusion that could be abused by anyone visiting the site. Exploitation by an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the...

Weaviate Console - Detect

Detected Weaviate Console interface. Weaviate was open-source vector database that stores data objects and vector embeddings for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Weaviate Console interface.""" from kittysploit import from lib.protocols.http.httpclient import...