25183 matches found
Test CGI Script - Detect
Test CGI script was detected. Response page returned by this CGI script exposes a list of server environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Test CGI script was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
Python Virtual Environment Directory Exposure Detection
An exposed Python virtual environment directory allows public access to internal files like pyvenv.cfg, installed packages, and configurations. This can leak sensitive information and aid attackers in identifying or exploiting vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """An expos...
Eclipse Theia IDE Panel - Detect
Detected Eclipse Theia IDE panel was exposed. Theia is an extensible platform for multi-language Cloud and Desktop IDEs. Exposed panels may have allowed unauthenticated access to development environments and terminal. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Eclipse Theia IDE panel w...
MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access Detection
The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication !/usr/bin/env python3 -- coding: utf-8 -- """The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication.""" from kittysploit import from...
Proxmox Virtual Environment Login Panel - Detect
Proxmox Virtual Environment login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Proxmox Virtual Environment login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Proxmox Virtual...
React App Environment Js Detection
Detects React App Environment Js. !/usr/bin/env python3 -- coding: utf-8 -- """Detects React App Environment Js.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'React App Environment Js Detection', 'description':...
XAMPP Environment Variables Exposure Detection
printenv.pl file is exposed in XAMPP leaking environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """printenv.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XAMPP Environment Variables Exposure...
SAP NetWeaver Composition Environment Tools - Detect
Detects the presence of the SAP NetWeaver Process Integration / Composition Environment Tools page !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the SAP NetWeaver Process Integration / Composition Environment Tools page.""" from kittysploit import from...
SendGrid Env File Exposure Detection
SendGrid file is exposed containing environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """SendGrid file is exposed containing environment variables.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...
Detect Spring Gateway Actuator
Sensitive environment variables may not be masked !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive environment variables may not be masked.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Spring Gateway...
Symfony Profiler - Remote Access via Injected Arguments Detection
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...
GHSA-3FXJ-6JH8-HVHX vulnerabilities
Vulnerabilities for packages: cosmo-router, cosmo-router-fips, karma-fips, kyverno, commercial-kyverno, karma, fluxcd-kustomize-mutating-webhook-fips, zitadel, fluxcd-kustomize-mutating-webhook, telegraf...
Exploit for CVE-2026-16723
Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disc...
droidground v1.0.11
DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...
EUVD-2021-34855
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...
Malicious code in use-context-selector-tony (npm)
Source: amazon-inspector 6dde262b1fecc08fe5853c4ec7ada6c3c3746a6e7afb5bd18c33d5adfa03843c This package is a name-squat of the popular use-context-selector library and ships a postinstall script dist/postinstall.js / src/postinstall.js that, on npm install, reads process.env and beacons to the...
Malicious code in wml-core (npm)
Source: amazon-inspector 46afe229d6efe1ef10d025302ed21e5c2c44bdd772c8fbb28d037cb1215c84ba [email protected] is a dependency-confusion package targeting an internal wml- namespace, published with an inflated version 99.0.1 to win npm resolution against an internal package of the same name. The...
Malicious code in private-next-pages (npm)
Source: amazon-inspector 00c6505c70734328f859fa758ad45ba680403a4cfeedd60d2f9e035b026bd45c package.json declares a postinstall script that uses Node's childprocess to execute reconnaissance commands including whoami and beacon results out via HTTPS. The script contacts https://api.ipify.org to...
Malicious code in react-malicious-clone (npm)
Source: amazon-inspector f03498aa5167e02289d4c8984282f6a1b6321af60fb9ff04d0ce9503faefffdd Package name impersonates React and the package.json copies React's description, homepage react.dev, bugs URL, and canary versioning scheme. On require/import, index.js synchronously collects os.hostname,...
Malicious code in lokal-mcp (npm)
Source: amazon-inspector 04df34ff182a72a46dc032016ed38e0caf7452ac3b8d382bb15221706c01a9e8 index.js contains a hardcoded URL https://rettfrabonden.com referenced alongside process.env reads and fetch POST calls index.js line 24 defines the destination, lines 29 and 37-38 perform fetch/POST. The...