Joomla! Component Percha Image Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Image Attach comperchaimageattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 --...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion Detection

A directory traversal vulnerability in the Moron Solutions MS Comment commscomment component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerabili...

Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion Detection

A directory traversal vulnerability in the Picasa2Gallery compicasa2gallery component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- codin...

Joomla! Component JotLoader 2.2.1 - Local File Inclusion Detection

A directory traversal vulnerability in the JotLoader comjotloader component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal Detection

A directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

Ericsson Drutt MSDP - Local File Inclusion Detection

Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI in the Instance Monitor. !/usr/bin/env python3 -- coding: utf-8 -- """Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, an...

WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal Detection

WordPress SE HTML5 Album Audio Player 1.1.0 contains a directory traversal vulnerability in downloadaudio.php that allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress SE HTML5 Album Audio Player 1.""" impor...

Node.js <8.6.0 - Directory Traversal Detection

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. !/usr/bin/env python3 -- coding: utf-8 -- """Node.""" import re from kittysploit import from...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Cargo Lock Packages Disclosure Detection

Detects Cargo Lock Packages Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cargo Lock Packages Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cargo Lock Packages Disclosure Detection',...

Chanjet TPlus DownloadProxy.aspx - Arbitrary File Read Detection

Chanjet TPlus DownloadProxy.aspx file has an arbitrary file reading vulnerability. An attacker can obtain sensitive files on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Chanjet TPlus DownloadProxy.""" from kittysploit import from lib.protocols.http.httpclien...

Twonky Server 8.5.2 on Linux and Windows - Log File Exposure Detection

Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Twonky Server 8."...

Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI Detection

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

Kyocera Printer d-COPIA253MF - Directory Traversal Detection

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversa...

Grafana v8.x - Arbitrary File Read Detection

Grafana versions 8.0.0-beta1 through 8.3.0 are vulnerable to a local directory traversal, allowing access to local files. The vulnerable URL path is /public/plugins/NAME/, where NAME is the plugin ID for any installed plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Grafana versions 8."""...

SolarView Compact < 6.00 - Directory Traversal Detection

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd...

GeoServer - XML External Entity Injection Detection

GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity XXE injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input. !/usr/bin/env python3 -- coding: utf-8 --...

Sonatype Nexus Repository Manager 3 - Local File Inclusion Detection

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. !/usr/bin/env python3 -- coding: utf-8 -- """Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files.""" import re from...

esm.sh <= v136 - Local File Inclusion Detection

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """esm.""" import re from kittysploit import from...