HP System Management Homepage (SMH) v2.x.x.x - Open Redirect Detection

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...

Django - Open Redirect Detection

Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 contains an open redirect vulnerability. If django.middleware.common.CommonMiddleware and APPENDSLASH settings are selected, and if the project has a URL pattern that accepts any path ending in a slash, an attacker can redirect a user to a...

Alfresco Share - Open Redirect Detection

Alfresco Share before 5.2.6, 6.0.N and 6.1.N contains an open redirect vulnerability via a crafted POST request. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf...

Open Akamai ARL - Cross-Site Scripting Detection

Open Akamai ARL contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """Open Akamai ARL contains a cross-site scripting vulnerability.""" from...

Fortinet FortiOS - Open Redirect/Cross-Site Scripting Detection

FortiOS Web User Interface in 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting attacks via the "redirect" parameter to "login." !/usr/bin/env python3 -- coding: utf...

WordPress Brandfolder - Open Redirect (RFI & LFI) Detection

WordPress Brandfolder is vulnerable to remote/local file inclusion and allows remote attackers to inject an arbitrary URL into the 'callback.php' endpoint via the 'wpabspath' parameter which will redirect the victim to it. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder is...

OPNsense <=20.1.5 - Open Redirect Detection

OPNsense through 20.1.5 contains an open redirect vulnerability via the url redirect parameter in the login page, which is not filtered. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/en...

EpiServer Find <13.2.7 - Open Redirect Detection

EpiServer Find before 13.2.7 contains an open redirect vulnerability via the tredirect parameter in a crafted URL, such as a /findv2/click URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations...

WordPress AnyComment <0.3.5 - Open Redirect Detection

WordPress AnyComment plugin before 0.3.5 contains an open redirect vulnerability via an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated. An attacker can redirect a user to a malicious site and possibly obtain sensitive information...

Microsoft Open Management Infrastructure - Remote Code Execution Detection

Microsoft Open Management Infrastructure is susceptible to remote code execution OMIGOD. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Open Management Infrastructure is susceptible to remote code execution OMIGOD.""" from kittysploit import from lib.protocols.http.httpclient import...

OpenCms 14 & 15 - Open Redirect Detection

Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercur.""" import re from...

WordPress Toolbar <= 2.2.6 - Open Redirect Detection

The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin redirects to any...

WordPress WPtouch 3.7.5 - Open Redirect Detection

WordPress WPtouch 3.7.5 is affected by an Open Redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPtouch 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress WPtouch 3.7.5 - Ope...

WordPress Weekender Newspaper 9.0 - Open Redirect Detection

WordPress Weekender Newspaper theme 9.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Weekender...

WordPress Grimag <1.1.1 - Open Redirection Detection

WordPress Grimag theme before 1.1.1 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Grimag theme befo...

nitely/spirit 0.12.3 - Open Redirect Detection

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Pie Register <3.8.2.3 - Open Redirect Detection

WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

Mosparo < 1.0.2 - Open Redirect Detection

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in GitHub repository mosparo/mosparo prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Stable Diffusion Webui 1.10.0 - Open Redirect Detection

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python...

Gradio - Open Redirect Detection

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...