Teleport Login Panel - Detect

Detects Teleport web login interface exposed at /web/login and version information from /webapi/ping !/usr/bin/env python3 -- coding: utf-8 -- """Detects Teleport web login interface exposed at /web/login and version information from /webapi/ping.""" import re from kittysploit import from...

nMon Panel - Detect

nMon login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """nMon login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nMon Panel - Detect', 'description': 'nMon login...

Rallly Login - Panel Detect

Rallly login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Rallly login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rallly Login - Panel Detect', 'description':...

RG-UAC Ruijie - Password Hashes Leak Detection

Multiple Firewall Devices from vendor Ruijie Networks are affected by an information leakage vulnerability where credentials are included in the source code of the web admin login interface usernames, roles, MD5 hashes and additional details of each user. Attackers can use this information to...

Sonar Poller Login - Panel Detect

Sonar Poller login/interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Sonar Poller login/interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sonar Poller Login - Panel Detect...

Splunk MCP Server IDE Login - Detect

Splunk MCP Server IDE login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk MCP Server IDE login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk MCP Serv...

jotty·page Login - Panel Detect

jotty·page login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """jotty·page login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jotty·page Login - Panel Detect',...

Kestra Login - Panel Detect

Kestra login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Kestra login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kestra Login - Panel Detect', 'description':...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

Aruba VIA VPN - Login Panel Detection

Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution. The web management portal exposes a login interface typically on port 4343. !/usr/bin/env python3 -- coding: utf-8 -- """Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution."""...

FeatherPanel Panel - Detect

FeatherPanel login interface was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FeatherPanel login interface was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FeatherPanel Panel - Detect',...

SUSE CVE-2026-42218

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure...

CVE-2026-42218 XRDP is vulnerable to a server timing attack, leading to user enumeration

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure...

CVE-2026-51926

An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentication mechanism that allows user enumeration through the login interface. An attacker can differentiate between valid...

CVE-2026-51926

An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentication mechanism that allows user enumeration through the login interface. An attacker can differentiate between valid...

CVE-2026-51926

A vulnerability in docuForm GmbH FSM Client v.11.11c allows a remote attacker to perform user enumeration via the login.php component. The flaw exists within the authentication mechanism, where variations in server responses allow an attacker to distinguish between valid and invalid usernames. Th...

CVE-2026-51926

An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentication mechanism that allows user enumeration through the login interface. An attacker can differentiate between valid...

PT-2026-56932

An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentication mechanism that allows user enumeration through the login interface. An attacker can differentiate between valid...

CVE-2026-38979

The ajenti web admin panel (versions through v2.2.13 ) contains a clickjacking weakness in its browser-facing login and administrative UI. The root cause is located in ajenti-core/aj/http.py, where the core HTTP response path initializes an empty header list and finalizes responses via WSGI start...

PT-2026-56023

Name of the Vulnerable Software and Affected Versions ajenti versions prior to 2.2.14 Description The browser-facing login and administrative UI contains a clickjacking weakness. This occurs because the core HTTP response path in ajenti-core/aj/http.py initializes an empty header list and finaliz...