Calendarix Admin Login Panel - Detect

Calendarix admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Calendarix admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Calendarix Admin Login Panel - Detect...

WordPress Church Admin 0.33.2.1 - Local File Inclusion Detection

WordPress Church Admin 0.33.2.1 is vulnerable to local file inclusion via the "key" parameter of plugins/church-admin/display/download.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin 0.""" import re from kittysploit import from lib.protocols.http.httpclient import...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

Chatwoot - Installation Detection

Detected chatwoot instance with the initial installation onboarding page accessible at /installation/onboarding, enabling unauthenticated users to create the first Super Admin account and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected chatwoot instance with the...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Windows Admin Center Panel - Detection

Detect Windows Admin Center Panel web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Windows Admin Center Panel web interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Windows Admin Center Pane...

Apache Ambari Exposure Admin Login Panel Detection

An Apache Ambari panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Ambari panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ambari Exposure Admin Login Panel...

Laravel Backpack Admin Login Panel - Detect

Laravel Backpack admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Backpack admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Backpack Admin...

BMC Discovery Outpost Admin Panel - Detect

BMC Discovery Outpost admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery Outpost admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Outpost Admin...

Bootstrap Admin Panel Template Panel - Detect

Bootstrap Admin Panel Template panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bootstrap Admin Panel Template panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bootstrap Admin Panel...

Botpress Admin Panel - Detect

Botpress admin panel was detected. Botpress is an open-source conversational AI platform for building chatbots and virtual assistants. !/usr/bin/env python3 -- coding: utf-8 -- """Botpress admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Palo Alto Expedition - Admin Account Takeover Detection

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. !/usr/bin/env python3 -- coding: utf-8 -- """Missing authentication for a critical function in Palo Alto Networks...

Campaign Monitor for WordPress - Information Disclosure Detection

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal Detection

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. !/usr/bin/env python3 -- coding: utf-8 -- """TRUfusion Enterprise versions...

Delta Controls Admin Login Panel - Detect

Delta Controls admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Delta Controls admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delta Controls Admin Login...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure Detection

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. !/usr/bin/e...

WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting Detection

WordPress plugin sitepress-multilingual-cms 3.6.3 is vulnerable to cross-site scripting in processforms via any localefilename parameter such as localefilenameen in an authenticated theme-localization.php request to wp-admin/admin.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin...

Etherpad Lite <1.6.4 - Admin Authentication Bypass Detection

Etherpad Lite before 1.6.4 is exploitable for admin access. !/usr/bin/env python3 -- coding: utf-8 -- """Etherpad Lite before 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etherpad Lite 1.6.4 - Admin...

CirCarLife - Installer Detection

A CirCarLife admin panel was accessed. CirCarLife is an internet-connected electric vehicle charging station !/usr/bin/env python3 -- coding: utf-8 -- """A CirCarLife admin panel was accessed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Beszel Unfinished Installation Detection

Detected Beszel server monitoring hub had an unfinished installation with no admin account configured, allowing attackers to create an admin account and gain full control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Beszel server monitoring hub had an unfinished installation with no adm...