Open WebUI < 0.9.5 - Information Disclosure Detection

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-...

DEOS OPEN 500EMS Controller - Admin Exposure Detection

The DEOS OPEN 500EMS controller exposes administrative functions without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The DEOS OPEN 500EMS controller exposes administrative functions without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Open Journal Systems Installer - Exposure Detection

Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

Open Journal Systems pkp-lib - Open Redirect Detection

Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function. !/usr/bin/env python3 -- coding: utf-8 -- """Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the set.""" import re...

WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect Detection

WordPress Newsletter Manager 1.5 is susceptible to an open redirect vulnerability. The plugin used base64 encoded user input in the appurl parameter without validation to redirect users using the header PHP function, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 --...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

IceWarp - Open Redirect Detection

IceWarp open redirect vulnerabilities were detected. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp open redirect vulnerabilities were...

WP Content Copy Protection & No Right Click - Open Redirect Detection

The WP Content Copy Protection & No Right Click plugin before version 15.3 contains an open-redirect vulnerability via the referrer parameter in no-js.php, allowing redirection of users to external sites. !/usr/bin/env python3 -- coding: utf-8 -- """The WP Content Copy Protection & No Right Click...

Kentico CMS 8.2 - Open Redirect Detection

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico CMS 8.""" import re from kittysplo...

Forescout CounterACT 6.3.4.1 - Open Redirect Detection

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 'a' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...

Gradio - Open Redirect Detection

An open redirect vulnerability in Gradio allows attackers to craft malicious URLs that redirect users to external, potentially harmful sites without proper validation. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in Gradio allows attackers to craft malicious URLs th...

Odoo <= 8.0-20160726 & 9.0 - Open Redirect Detection

An Open Redirect vulnerability in Odoo versions = 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """An Open Redirect vulnerability in Odoo versions = 8.""" import re from kittysploit import from...

Optergy Proton/Enterprise Building Management System - Open Redirect Detection

Optergy Proton/Enterprise Building Management System contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Optergy...

SonicWall SonicOS 7.0 - Open Redirect Detection

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations...

GnuBoard5 5.5.16 - Open Redirect Detection

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard5 5.""" import re...

Rudloff alltube prior to 3.0.1 - Open Redirect Detection

An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability...

Revive Adserver <5.1.0 - Open Redirect Detection

Revive Adserver before 5.1.0 contains an open redirect vulnerability via the dest, oadest, and ct0 parameters of the lg.php and ck.php delivery scripts. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized...

WordPress PhastPress <1.111 - Open Redirect Detection

WordPress PhastPress plugin before 1.111 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress PhastPress...

Telaen => v1.3.1 - Open Redirect Detection

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirection Vulnerability in the redir.""" import re from kittysploit import from...