Odoo <= 8.0-20160726 & 9.0 - Open Redirect Detection

An Open Redirect vulnerability in Odoo versions = 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """An Open Redirect vulnerability in Odoo versions = 8.""" import re from kittysploit import from...

Netsweeper 4.0.4 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter to webadmin/deny/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in Netsweeper 4.""" from kittysploit import...

FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting Detection

FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerability. The login redir parameter is not sanitized, so an attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion Detection

WordPress Wechat Broadcast plugin 1.2.0 and earlier allows Directory Traversal via the Image.php url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Wechat Broadcast plugin 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Admidio - Cross-Site Scripting Detection

A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The reflected cross-site scripting vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting Detection

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Cedar Gate EZ-NET...

WordPress Duplicator <1.4.7 - Authentication Bypass Detection

WordPress Duplicator plugin before 1.4.7 is susceptible to authentication bypass. The plugin discloses the URL of the backup to unauthenticated visitors accessing the main installer endpoint. If the installer script has been run once by an administrator, this allows download of the full site back...

WordPress My Calendar <= 3.1.9 - Cross-Site Scripting Detection

WordPress plugin My Calendar = 3.1.9 is susceptible to reflected cross-site scripting which can be triggered via unescaped usage of URL parameters in multiple locations throughout the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin My Calendar = 3.""" from kittysploit import...

Cisco Secure Firewall ASA & FTD - Authentication Bypass Detection

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

Versa Concerto API Path Based - Authentication Bypass Detection

Authentication bypass in the Versa Concerto API, caused by URL decoding inconsistencies. It allowed unauthorized access to certain API endpoints by manipulating the URL path.This issue enabled attackers to bypass authentication controls and access restricted resources. !/usr/bin/env python3 --...

esm.sh <= v136 - Local File Inclusion Detection

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """esm.""" import re from kittysploit import from...

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File Detection

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

URL Shortify <= 1.12.1 - Open Redirect Detection

The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirectto' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentiall...

Gradio - Open Redirect Detection

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

Dashy <= 4.3.6 - Reflected XSS via Workspace Detection

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

SIAM 2.0 - Cross-Site Scripting Detection

A Reflected Cross-Site Scripting XSS vulnerability has been identified in the SIAM Invitation application. The url parameter of the qrcode.jsp page does not properly sanitize user input, allowing the injection and execution of malicious scripts in the browser. !/usr/bin/env python3 -- coding: utf...

Next.js / Vite Public ENV Exposure Detection

Identified public environment variables exposed to the client in Next.js NEXTDATA.env and Vite applications through runtime configurations. Extended to detect any exposed Supabase URL on the page, regardless of variable name. !/usr/bin/env python3 -- coding: utf-8 -- """Identified public...

WordPress WPML Multilingual CMS < 4.6.1 - Cross-Site Scripting Detection

The WPML Multilingual CMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions prior to 4.6.1. The plugin does not escape some URL attributes before outputting them to a page, allowing attackers to inject malicious JavaScript which may be executed in the browser of...

YOURLS - Detection

Detects if the target is running a YOURLS Your Own URL Shortener server !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the target is running a YOURLS Your Own URL Shortener server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

OpenVPN Host Header Injection Detection

A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by using the 'Host' HTTP header field. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by...