Mail Mint < 1.19.5 - Unauthenticated Email Disclosure Detection

Mail Mint WordPress plugin 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Mail Mi...

Jira Unauthenticated Resolutions Detection

Detects Jira Unauthenticated Resolutions. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Resolutions.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Resolutions...

F5 BIG-IP iControl REST Panel - Detect

F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested. !/usr/bin/env python3 -- coding: utf-8 -- """F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested.""" from kittysploit import from...

Couchbase Buckets Unauthenticated REST API - Detect

Couchbase Buckets REST API without authentication was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Couchbase Buckets REST API without authentication was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

ArcGIS Exposed REST API documentation Detection

ArcGIS REST API documentation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """ArcGIS REST API documentation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ArcGIS Exposed REST API...

Jira - Incorrect Authorization Detection

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. !/usr/bin/env...

WordPress WPQA <5.5 - Improper Access Control Detection

WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPQA plugin before 5.""...

MLFlow < 2.8.1 - Sensitive Information Disclosure Detection

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in MLFlow versions 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

XWiki REST API - Attachments Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's...

GeoServer - Missing Authorization on REST API Index Detection

GeoServer contains a missing authorization vulnerability that allows unauthorized access to the REST API Index page, potentially exposing sensitive configuration information. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer contains a missing authorization vulnerability that allows...

XWiki REST API - Private Pages Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access information about private pages through the pages endpoint. This could lead to disclosure of sensitive information and page metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's REST API allows...

Unauthenticated Spark REST API Detection

The Spark product's REST API interface allows access to unauthenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """The Spark product's REST API interface allows access to unauthenticated users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress REST API User Enumeration Detection

The REST API exposed user data for all users who had authored a post of a public post type. WordPress 4.7.1 limits this to only post types which have specified that they should be shown within the REST API. !/usr/bin/env python3 -- coding: utf-8 -- """The REST API exposed user data for all users...

Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API - Detect

Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Redmine Issues - Exposure Detection

Redmine instance exposed issues via the REST API without authentication. This could have leaked sensitive project information, issue details, and user data. !/usr/bin/env python3 -- coding: utf-8 -- """Redmine instance exposed issues via the REST API without authentication.""" from kittysploit...

Infinispan Console - Detection

Infinispan is an open-source in-memory data grid by Red Hat that exposes a management console under /console/welcome and a REST API under /rest/v2/ on the default port 11222. This template fingerprints Infinispan by matching the unique HTML console markers and the Digest authentication challenge...

Apereo CAS Cross-Site Scripting Detection

Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Apereo CAS through 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WP Cerber < 8.9.3 - Broken Access Control Detection

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. !/usr/bin/env python3 -- coding: utf-8 -- """WP Cerber 8."""...

Exploit for CVE-2026-8206

CVE-2026-8206 Vulnerability: Unauthenticated Account Takeo...

ADOKit v1.4.2

ADOKit Description Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen...