SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

Invoice Ninja Setup Page - Exposure Detection

Detects exposed Invoice Ninja Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Invoice Ninja Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Invoice Ninja Setup Page - Exposure...

JustFans Installation Page - Exposure Detection

Detects exposed JustFans Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed JustFans Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JustFans Installation Page - Exposure Detection',...

KLR 300N Router - Exposed Installation Detection

Home router wireless KLR 300N setup page were Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Home router wireless KLR 300N setup page were Detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KLR 300N...

GLPI Installation Page - Exposure Detection

Detects exposed GLPI Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed GLPI Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GLPI Installation Page - Exposure Detection',...

SFTPGo Admin - Setup Detection

SFTPGo Admin Password setup page has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SFTPGo Admin Password setup page has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SFTPGo Admin - Setup...

Snipe-IT Setup Page - Exposure Detection

Detects exposed Snipe-IT Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Snipe-IT Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Snipe-IT Setup Page - Exposure Detection',...

Zenphoto <1.5 Installer - Detect

Zenphoto setup page before version 1.5 is susceptible to sensitive information disclosure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Zenphoto setup page before version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

TastyIgniter Setup Page - Exposure Detection

Detects exposed TastyIgniter Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed TastyIgniter Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TastyIgniter Setup Page - Exposure...

Trilium Notes Installer - Exposure Detection

Detects if the Trilium Notes setup page is accessible. !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the Trilium Notes setup page is accessible.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Trilium Notes...

Wiki.js Setup - Exposure Detection

Checks for the presence of a Wiki.js Setup Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Wiki.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wiki.js Setup - Exposure Detection',...

Ubersmith Setup Page - Exposure Detection

Detects exposed Ubersmith Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Ubersmith Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ubersmith Setup Page - Exposure Detection',...

Mura CMS Setup Page - Exposure Detection

Detects exposed Mura CMS Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Mura CMS Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mura CMS Setup Page - Exposure Detection',...

OnlyOffice Wizard Page - Exposure Detection

Detects exposed OnlyOffice Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed OnlyOffice Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OnlyOffice Wizard Page - Exposure Detection',...

CubeBackup Setup Page - Exposure Detection

Detects exposed CubeBackup Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed CubeBackup Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CubeBackup Setup Page - Exposure Detection',...

Call.com Setup Page - Exposure Detection

Detects exposed Call.com Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Call.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Call.com Setup Page - Exposure Detection', 'description': 'Detec...

ProfitTrailer Setup Page - Exposure Detection

Detects exposed ProfitTrailer Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed ProfitTrailer Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ProfitTrailer Setup Page - Exposure...

jfa-go Setup Page - Exposure Detection

Detects exposed jfa-go Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed jfa-go Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jfa-go Setup Page - Exposure Detection', 'description...

PT-2026-59210

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of the command line. In previous versions of Kiwi TCMS this page still renders and responds to requests even after first use. Impact The /init-db/ page does not require any user...

CVE-2026-11341

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEIvalue causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used...