GTranslate < 2.8.11 - Open Redirect Detection

The Translate WordPress with GTranslate WordPress plugin was affected by an Unauthenticated Open Redirect security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Translate WordPress with GTranslate WordPress plugin was affected by an Unauthenticated Open Redirect secu.""" import ...

Accept Donations with PayPal <= 1.5.2 - Open Redirect Detection

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.5.2. This is due to insufficient validation on the redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially...

Thinkific - Open Redirect Detection

Thinkific contains an open redirect vulnerability via the http://interact.sh URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Thinkific contains an...

Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect Detection

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requestedpage' POST parameter in the verifyusernamepassword function. This makes it possible for unauthenticated...

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect Detection

WordPress Page Builder KingComposer 2.9.6 and prior does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action which is available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Page Builder...

BentoML v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 ...

Traefik - Open Redirect Detection

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding...

ILIAS eLearning <7.16 - Open Redirect Detection

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS eLearning before 7.""" import...

SAP Solution Manager - Open Redirect Detection

SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Solution Manag...

IceWarp Mail Server - Open Redirect Detection

IceWarp Mail Server contains an open redirect via the referer parameter. This can lead to phishing attacks or other unintended redirects. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server contains an open redirect via the referer parameter.""" import re from kittysploit import from...

Astro SSR - Open Redirect Detection

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. !/usr/bin/env python3...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...

Phoenix Framework - Open Redirect Detection

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Framework versions 1.""" import re from...

Noptin < 1.6.5 - Open Redirect Detection

Noptin 1.6.5 is susceptible to an open redirect vulnerability. The plugin does not validate the "to" parameter before redirecting the user to its given value, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """Noptin 1.""" import re from kittysploit import from...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect Detection

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. !/usr/bin/env python3 -- coding: utf-8 -- """Polarisft Intellect Core Banking Software Version 9.""" import re from...

WordPress AcyMailing <7.5.0 - Open Redirect Detection

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...

PrivateGPT < 0.5.0 - Open Redirect Detection

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. !/usr/bin/env python3 -- codin...

Appsuite Login Panel - Detect

Detects Appsuite Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Appsuite Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Appsuite Login Panel - Detect', 'description'...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect Detection

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...