Joomla! ChronoForums 2.0.11 - Local File Inclusion Detection

Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials. !/usr/bin/env python3 -- coding: utf-8 --...

Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion Detection

A directory traversal vulnerability in the Seber Cart comsebercart component 1.0.0.12 and 1.0.0.13 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

Joomla! Component LoginBox - Local File Inclusion Detection

A directory traversal vulnerability in the LoginBox Pro comloginbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the LoginBox Pro...

Joomla! Component Horoscope 1.5.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Daily Horoscope comhoroscope component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion Detection

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

Joomla! Component ZiMBCore 0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the ZiMB Core aka ZiMBCore or comzimbcore component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php...

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion Detection

A directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion Detection

A directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Google Cloud Access Token Detection

Internal Google Cloud access tokens are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Internal Google Cloud access tokens are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Access Token...

Google Api Private Key Detection

Google API private keys are exposed in files. !/usr/bin/env python3 -- coding: utf-8 -- """Google API private keys are exposed in files.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Api Private Key...

Go.mod Disclosure Detection

go.mod internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go.mod Disclosure Detection', 'description': 'go.mod internal file is exposed.',...

Hrsale 2.0.0 - Local File Inclusion Detection

Hrsale 2.0.0 is vulnerable to local file inclusion. This exploit allow you to download any readable file from server without permission and login session !/usr/bin/env python3 -- coding: utf-8 -- """Hrsale 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Pantheon upstream.yml Disclosure Detection

Public Pantheon YAML Configuration Files might include sensitive info !/usr/bin/env python3 -- coding: utf-8 -- """Public Pantheon YAML Configuration Files might include sensitive info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

Renovate Configuration Exposure Detection

Detects exposed Renovate configuration files that may contain sensitive tokens or credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Renovate configuration files that may contain sensitive tokens or credentials.""" from kittysploit import from lib.protocols.http.httpclient...

Pyproject Disclosure Detection

Detects Pyproject Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pyproject Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pyproject Disclosure Detection', 'description': 'Detects...

WP-CLI Yaml File Exposure Detection

Detects WP-CLI Yaml File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WP-CLI Yaml File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WP-CLI Yaml File Exposure Detection', 'description':...

WP Smushit - Full Path Disclosure Detection

Smushit WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Smushit WordPress plugin contains ...

WordPress Plugin Imsanity - Full Path Disclosure Detection

WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Imsanity plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...