Eleanor CMS - Open Redirect Detection

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERYSTRING. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in go.""" import re from kittysploit import fro...

Kaseya Virtual System Administrator - Open Redirect Detection

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. !/usr/bin/env...

Xsuite <=2.4.4.5 - Open Redirect Detection

Xsuite 2.4.4.5 and prior contains an open redirect vulnerability, which can allow a remote attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the redirurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Xsuite 2.""" import re from...

Novius OS 5.0.1-elche - Open Redirect Detection

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. !/usr/bin/env python3 -- coding: utf-8 -- """Novius OS 5.""" import re from kittysploit import from...

WordPress StageShow <5.0.9 - Open Redirect Detection

WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshowredirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter. !/usr/bin/env python3 -- coding:...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting Detection

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open-School 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Grav < 1.7 - Open Redirect Detection

Grav before 1.7 has an open redirect vulnerability via common/Grav.php. This is partially fixed in 1.6.23 and still present in 1.6.x. !/usr/bin/env python3 -- coding: utf-8 -- """Grav before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

openarchives - Detection

Detects Open Archives Initiative instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Open Archives Initiative instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'openarchives - Detection',...

Open Game Panel Login Panel - Detect

Open Game Panel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Open Game Panel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Game Panel Login Panel - Detect',...

open-mjpg-streamer Detection

Open mjpg-streamer service sharing webcam/camera feed !/usr/bin/env python3 -- coding: utf-8 -- """Open mjpg-streamer service sharing webcam/camera feed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Open Virtualization Userportal & Webadmin Panel Detection

Open Virtualization Userportal & Webadmin panels were detected. Open Virtualization Manager is an open-source distributed virtualization solution designed to manage enterprise infrastructure. oVirt uses the trusted KVM hypervisor and is built upon several other community projects, including...

TinyTiny RSS Open Redirect Detection

Detected an open redirect vulnerability in Tiny Tiny RSS where the return parameter in public.php was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Tiny Tiny RS...

WordPress ProStore <1.1.3 - Open Redirect Detection

WordPress ProStore theme before 1.1.3 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ProStore theme...

WordPress Upward Themes <1.5 - Open Redirect Detection

WordPress Upward Themes 1.5 accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By...

Mozilla Pollbot - Open Redirect Detection

Mozilla Pollbot contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Mozilla Pollbot contains an open redirect...

JumpServer - Open Redirect via Referer Header Detection

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. !/usr/bin/env...

XWiki - Open Redirect Detection

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL...

GPT Academic v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in GPT Academic v1.3.9, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 -- codin...

XWiki - Open Redirect Detection

XWiki Platform is vulnerable to open redirect attacks due to improper validation of the xredirect parameter. This allows an attacker to redirect users to an arbitrary website. The vulnerability is patched in versions 14.10.4 and 15.0. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is...

BlogEngine CMS - Open Redirect Detection

Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect !/usr/bin/env python3 -- coding: utf-8 -- """Blogengine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BlogEngine CMS - Open Redirect...