Openfire Administration Console - Authentication Bypass Detection

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

Campaign Monitor for WordPress - Information Disclosure Detection

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

W&B Weave Server - Remote Arbitrary File Leak Detection

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin...

Windows Admin Center Panel - Detection

Detect Windows Admin Center Panel web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Windows Admin Center Panel web interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Windows Admin Center Pane...

Admin Menu Editor - Full Path Disclosure Detection

Admin Menu Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Admin Menu Editor...

XPhone Connect Admin Interface - Detect

Detects the presence of the XPhone Connect admin interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the XPhone Connect admin interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

YunoHost Admin Panel - Detect

YunoHost Admin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """YunoHost Admin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YunoHost Admin Panel - Detect', 'description':...

Z-BlogPHP Admin Login Panel - Detect

Z-BlogPHP admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Z-BlogPHP admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Z-BlogPHP Admin Login Panel - Detect',...

Pulsar Admin UI Panel - Detect

Pulsar admin UI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin UI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin UI Panel - Detect', 'description':...

Ruckus Wireless Admin Login Panel - Detect

Ruckus Wireless admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruckus Wireless admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruckus Wireless Admin Login...

Securepoint UTM Admin Panel - Detect

Securepoint UTM admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Securepoint UTM admin panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Securepoint UTM Admin Panel -...

Shopware CMS detect

Detects Shopware CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopware CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopware CMS detect', 'description': 'Detects Shopware CMS', 'author':...

Apache Solr Admin Panel - Detect

Apache Solr admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Solr admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Solr Admin Panel - Detect', 'description...

Solr - Admin Page Access Detection

Solr's admin page was able to be accessed with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Solr's admin page was able to be accessed with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

Sphider Admin Login Panel - Detect

Sphider admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sphider admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sphider Admin Login Panel - Detect',...

Polycom Admin Panel - Detect

Polycom admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Polycom admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polycom Admin Panel - Detect', 'description': 'Polycom...

Poste.io Admin Panel - Detect

Poste.io login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Poste.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Poste.io Admin Panel - Detect', 'description': 'Poste.io login panel was...

Pulsar360 Admin Panel - Detect

Pulsar360 admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar360 admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar360 Admin Panel - Detect', 'description':...

Pulsar Admin Console Panel - Detect

Pulsar admin console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar admin console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar Admin Console Panel - Detect',...