Hazelcast Management Center - Configuration Exposure Detection

Detected poor architectural configurations or unsecured REST API endpoints in Hazelcast by checking the cluster endpoint, which exposes internal member IPs, UUIDs, and version information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected poor architectural configurations or unsecured REST AP...

MLFlow < 2.8.1 - Sensitive Information Disclosure Detection

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in MLFlow versions 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Gerrit Code Review - Account Enumeration Detection

Gerrit Code Review exposes the /accounts/ REST API endpoint which can be used to enumerate user accounts.The endpoint allows querying for accounts by username, email, or name, potentially revealing sensitive user information including account IDs, names, emails, and usernames without...

Graylog REST API Endpoints - Exposure Detection

Graylog is a centralized log management solution. According to the official documentation, it exposes multiple endpoints some by default. !/usr/bin/env python3 -- coding: utf-8 -- """Graylog is a centralized log management solution.""" from kittysploit import from lib.protocols.http.httpclient...

ZenML ZenML Server - Improper Authentication Detection

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. !/usr/bin/env python3 --...

LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure Detection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of...

GeoServer - Missing Authorization on REST API Index Detection

GeoServer contains a missing authorization vulnerability that allows unauthorized access to the REST API Index page, potentially exposing sensitive configuration information. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer contains a missing authorization vulnerability that allows...

Gravity SMTP WordPress Plugin - Sensitive Information Exposure Detection

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. !/usr/bin/env...

XWiki Platform - Unauthorized Document History Access Detection

A vulnerability in XWiki Platform's REST API allows unauthorized users to access document history information. The REST API endpoint exposes the history of any page including modification times, version numbers, author details username and display name, and version comments, regardless of access...

XWiki - HQL Injection Detection

XWiki is vulnerable to Hibernate Query Language HQL injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potential...

XWiki REST API - Private Pages Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access information about private pages through the pages endpoint. This could lead to disclosure of sensitive information and page metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's REST API allows...

Mail Mint < 1.19.5 - Unauthenticated Email Disclosure Detection

Mail Mint WordPress plugin 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Mail Mi...

WordPress WPQA <5.5 - Improper Access Control Detection

WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WPQA plugin before 5.""...

Open Automation Software OAS Platform V16.00.0121 - Missing Authentication Detection

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints Detection

The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as movi...

WordPress Events Calendar 6.8.2.1 - Information Disclosure Detection

The Events Calendar WordPress plugin 6.8.2.1 contains missing access checks in the REST API, letting unauthenticated users access information about password protected events, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Events Calendar WordPress plugin 6.""...

XWiki REST API - Attachments Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's...

Unauthenticated Spark REST API Detection

The Spark product's REST API interface allows access to unauthenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """The Spark product's REST API interface allows access to unauthenticated users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Jira Rest API Server Information Detection

Detected Jira REST API serverInfo endpoint is accessible without authentication, exposing sensitive server information including version, build number, server title, base URL, and server time. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Jira REST API serverInfo endpoint is accessible...

F5 BIG-IP iControl REST Panel - Detect

F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested. !/usr/bin/env python3 -- coding: utf-8 -- """F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested.""" from kittysploit import from...