Dgraph <= 25.3.2 - Admin Token Disclosure Detection

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

Delta Controls Admin Login Panel - Detect

Delta Controls admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Delta Controls admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delta Controls Admin Login...

Dialogic XMS Admin Console - Detect

Detects Dialogic XMS Admin Console - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dialogic XMS Admin Console - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dialogic XMS Admin Console -...

Dotclear Admin Login Panel - Detect

Dotclear admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dotclear admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dotclear Admin Login Panel - Detect',...

Freshrss Admin Dashboard - Exposed Detection

Freshrss Admin Dashboard has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Freshrss Admin Dashboard has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Freshrss Admin Dashboard - Exposed...

FusionAuth Exposed Admin Setup Detection

FusionAuth Admin Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """FusionAuth Admin Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Exposed Admin Setup Detection',...

Gargoyle Router Management Utility Admin Login Panel - Detect

Gargoyle Router Management Utility admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gargoyle Router Management Utility admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Grails Admin Console Panel - Detect

Grails Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Grails Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grails Admin Console Panel - Detect',...

GYRA Master Admin Login Panel - Detect

GYRA Master Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GYRA Master Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GYRA Master Admin Login Panel -...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

iClock Automatic Data Master Server Admin Panel - Detect

An iClock Automatic Data Master Server Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An iClock Automatic Data Master Server Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Cisco Identity Services Engine Admin Login Panel - Detect

Cisco Identity Services Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Leantime - Unfinished Installation Detection

Detected a Leantime instance identified with the setup installation page accessible at /install, enabling unauthenticated users to create the first administrator account and configure the database. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Leantime instance identified with the setup...

Live Helper Chat Admin Login Panel - Detect

Live Helper Chat admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Live Helper Chat admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Admin...

Lucee - Unset Credentials Detection

The Lucee admin panel has a first-time setup page which allows any user to set the administrator password. !/usr/bin/env python3 -- coding: utf-8 -- """The Lucee admin panel has a first-time setup page which allows any user to set the administrator password.""" from kittysploit import from...

Lucy Security Admin Panel Detection

Detects Lucy Security Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lucy Security Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucy Security Admin Panel Detection', 'description':...

Magento Connect Manager Installer - Detect

Magento Connect Manager installer was detected. The software, available via /downloader/ location, requires Magento admin rights and uses the same authorization methods as for backend. If an attacker locates a matching pair of login/password, the installation will be compromised. An attacker can...

Micro Focus Enterprise Server Admin Panel - Detect

Micro Focus Enterprise Server Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Enterprise Server Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus...

MPFTVC Admin Login Panel - Detect

MPFTVC admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MPFTVC admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPFTVC Admin Login Panel - Detect',...

Wavlink - Improper Access Control Detection

Wavlink WL-WN530H4 M30H4.V5030.210121 is susceptible to improper access control in the component /cgi-bin/ExportLogs.sh. An attacker can download configuration data and log files, obtain admin credentials, and potentially execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...