KafDrop - Cross-Site Scripting Detection

KafDrop contains a cross-site scripting vulnerability. It allows remote unauthenticated attackers to inject arbitrary HTML and/or JavaScript into the response returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """KafDrop contains a cross-site scripting vulnerability.""" from...

Publicly exposed Kafdrop Interface Detection

Publicly Kafdrop Interface is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly Kafdrop Interface is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Publicly exposed Kafdrop Interface Detection'...

Apache Kafka Cloud Clusters Expose Sensitive Data Large Companies

Some of the world’s largest companies have exposed reams of sensitive information from the cloud, researchers said – thanks to misconfigured Kafdrop instances. Kafdrop is a management interface for Apache Kafka, which is an open-source, cloud-native platform for collecting, analyzing, storing and...