Opentwrt luCI - Admin Login Page Detection

An Opentwrt admin login page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Opentwrt admin login page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Opentwrt luCI - Admin Login Page...

Cisco Identity Services Engine Admin Login Panel - Detect

Cisco Identity Services Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Keycloak Admin Console Configuration Disclosure Detection

Detected Keycloak admin console configuration was exposing realm name, client ID, SSL requirements, and authentication server URL enabling reconnaissance and targeted authentication attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Keycloak admin console configuration was exposing...

Kae's File Manager Admin Login Panel - Detect

Kae's File Manager admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager...

Netlify CMS Admin Login Panel - Detect

Netlify CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netlify CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netlify CMS Admin Login Panel -...

Leantime - Unfinished Installation Detection

Detected a Leantime instance identified with the setup installation page accessible at /install, enabling unauthenticated users to create the first administrator account and configure the database. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Leantime instance identified with the setup...

Microsoft Exchange Admin Center Login Panel - Detect

Microsoft Exchange Admin Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Admin Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microso...

3COM NJ2000 - Default Login Detection

3COM NJ2000 contains a default login vulnerability. Default admin login password of 'password' was found. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """3COM NJ2000...

OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

Ilch CMS Admin Login Panel - Detect

Ilch CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ilch CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ilch CMS Admin Login Panel - Detect',...

GYRA Master Admin Login Panel - Detect

GYRA Master Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GYRA Master Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GYRA Master Admin Login Panel -...

Jira Unauthenticated Admin Projects Detection

Detects Jira Unauthenticated Admin Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Admin Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Admin Projec...

Lucy Security Admin Panel Detection

Detects Lucy Security Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lucy Security Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucy Security Admin Panel Detection', 'description':...

Micro Focus Enterprise Server Admin Panel - Detect

Micro Focus Enterprise Server Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Enterprise Server Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus...

Monstra Admin Panel - Detect

Monstra admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Monstra admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monstra Admin Panel - Detect', 'description': 'Monstra...

Lucee - Unset Credentials Detection

The Lucee admin panel has a first-time setup page which allows any user to set the administrator password. !/usr/bin/env python3 -- coding: utf-8 -- """The Lucee admin panel has a first-time setup page which allows any user to set the administrator password.""" from kittysploit import from...

HuangDou UTCMS V9 - OS Command Injection Detection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure Detection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of...

Dgraph <= 25.3.2 - Admin Token Disclosure Detection

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

Dahua Web Service Panel - Detect

A Dahua admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Dahua admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dahua Web Service Panel - Detect',...