Metinfo 7.0.0 beta - SQL Injection Detection

Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Metinfo 7.""" from kittysploit import from lib.protocols.http.httpclie...

JFrog Artifactory 6.7.3 - Admin Login Bypass Detection

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

Kong Admin <=2.03 - Admin API Access Detection

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Kong Admin through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access Detection

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Etherpad Lite <1.6.4 - Admin Authentication Bypass Detection

Etherpad Lite before 1.6.4 is exploitable for admin access. !/usr/bin/env python3 -- coding: utf-8 -- """Etherpad Lite before 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etherpad Lite 1.6.4 - Admin...

Metinfo 7.0.0 beta - SQL Injection Detection

Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Metinfo 7.""" from kittysploit import from lib.protocols.http.httpclient...

MetInfo 7.0.0 beta - SQL Injection Detection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. !/usr/bin/env python3 -- coding: utf-8 -- """MetInfo 7.""" from kittysploit import from lib.protocols.http.httpclient import...

Apache Ambari Exposure Admin Login Panel Detection

An Apache Ambari panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Ambari panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ambari Exposure Admin Login Panel...

Ametys Admin Login Panel Detection

An Ametys admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Ametys admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ametys Admin Login Panel Detection'...

AMPPS Admin Login Panel Detection

An AMPPS Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AMPPS Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS Admin Login Panel Detection',...

Apollo Admin Service - Unauthenticated Access Detection

ApolloAdminservice was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """ApolloAdminservice was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Axigen Web Admin Detection

An Axigen Web Admin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Axigen Web Admin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Axigen Web Admin Detection',...

Batflat SQLite Database - Exposure Detection

Detected exposed Batflat CMS SQLite database files that may contain sensitive information including admin credentials, user data, site configuration, and content. Batflat stores its database in the /inc/data/ directory by default. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed...

BMC Discovery Outpost Admin Panel - Detect

BMC Discovery Outpost admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery Outpost admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Outpost Admin...

Bootstrap Admin Panel Template Panel - Detect

Bootstrap Admin Panel Template panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bootstrap Admin Panel Template panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bootstrap Admin Panel...

Botpress Admin Panel - Detect

Botpress admin panel was detected. Botpress is an open-source conversational AI platform for building chatbots and virtual assistants. !/usr/bin/env python3 -- coding: utf-8 -- """Botpress admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Budibase - Admin Installer Detection

Detected Budibase admin setup checklist endpoint was publicly accessible with no admin user created, allowing unauthenticated users to complete setup and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Budibase admin setup checklist endpoint was publicly accessib...

Calendarix Admin Login Panel - Detect

Calendarix admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Calendarix admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Calendarix Admin Login Panel - Detect...

Camaleon CMS Login - Panel Detection

Camaleon CMS admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Camaleon CMS admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Camaleon CMS Login - Panel...

Chatwoot - Installation Detection

Detected chatwoot instance with the initial installation onboarding page accessible at /installation/onboarding, enabling unauthenticated users to create the first Super Admin account and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected chatwoot instance with the...