MPFTVC Admin Login Panel - Detect

MPFTVC admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MPFTVC admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPFTVC Admin Login Panel - Detect',...

Wavlink - Improper Access Control Detection

Wavlink WL-WN530H4 M30H4.V5030.210121 is susceptible to improper access control in the component /cgi-bin/ExportLogs.sh. An attacker can download configuration data and log files, obtain admin credentials, and potentially execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

PMB 7.4.6 - Cross-Site Scripting Detection

PMB 7.4.6 contains a cross-site scripting vulnerability via the query parameter at /admin/convert/exportz3950new.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticatio...

Openfire Administration Console - Authentication Bypass Detection

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

Campaign Monitor for WordPress - Information Disclosure Detection

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

W&B Weave Server - Remote Arbitrary File Leak Detection

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin...

Windows Admin Center Panel - Detection

Detect Windows Admin Center Panel web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Windows Admin Center Panel web interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Windows Admin Center Pane...

Admin Menu Editor - Full Path Disclosure Detection

Admin Menu Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Admin Menu Editor...

WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS Detection

WordPress LiveChat plugin before 3.7.6 lacked CSRF and authorization checks on the option update handler in the LiveChatAdmin constructor. The code ran on any POST to a wp-admin URL without Referer validation, nonce check, or capability verification. This allowed unauthenticated attackers to upda...

XPhone Connect Admin Interface - Detect

Detects the presence of the XPhone Connect admin interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the XPhone Connect admin interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

YunoHost Admin Panel - Detect

YunoHost Admin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """YunoHost Admin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YunoHost Admin Panel - Detect', 'description':...

Z-BlogPHP Admin Login Panel - Detect

Z-BlogPHP admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Z-BlogPHP admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Z-BlogPHP Admin Login Panel - Detect',...

Pulsar Admin UI Panel - Detect

Pulsar admin UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin UI Panel - Detect', 'description':...

Ruckus Wireless Admin Login Panel - Detect

Ruckus Wireless admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus Wireless admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruckus Wireless Admin Login...

Securepoint UTM Admin Panel - Detect

Securepoint UTM admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Securepoint UTM admin panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Securepoint UTM Admin Panel -...

Shopware CMS detect

Detects Shopware CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopware CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopware CMS detect', 'description': 'Detects Shopware CMS', 'author':...

Apache Solr Admin Panel - Detect

Apache Solr admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Solr admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Solr Admin Panel - Detect', 'description...

Solr - Admin Page Access Detection

Solr's admin page was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Solr's admin page was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

Sphider Admin Login Panel - Detect

Sphider admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sphider admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sphider Admin Login Panel - Detect',...