WordPress Church Admin 0.33.2.1 - Local File Inclusion Detection

WordPress Church Admin 0.33.2.1 is vulnerable to local file inclusion via the "key" parameter of plugins/church-admin/display/download.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin 0.""" import re from kittysploit import from lib.protocols.http.httpclient import...

CirCarLife - Installer Detection

A CirCarLife admin panel was accessed. CirCarLife is an internet-connected electric vehicle charging station !/usr/bin/env python3 -- coding: utf-8 -- """A CirCarLife admin panel was accessed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Cisco ISE Admin Login Panel - Detect

Cisco Identity Services Engine ISE admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Identity Services Engine ISE admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Beszel Unfinished Installation Detection

Detected Beszel server monitoring hub had an unfinished installation with no admin account configured, allowing attackers to create an admin account and gain full control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Beszel server monitoring hub had an unfinished installation with no adm...

BigAnt Admin Login Panel - Detect

BigAnt admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BigAnt admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BigAnt Admin Login Panel - Detect',...

ChromaDB Installer - Detected

Detects the presence of the ChromaDB admin interface.The endpoint reveals connection details and authentication type. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the ChromaDB admin interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Claris FileMaker Server Admin Console - Detect

Claris FileMaker Server Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Claris FileMaker Server Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Claris...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure Detection

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. !/usr/bin/e...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

TBK DVR4104/DVR4216 Devices - Authentication Bypass Detection

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

TeamCity < 2023.11.4 - Authentication Bypass Detection

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible !/usr/bin/env python3 -- coding: utf-8 -- """In JetBrains TeamCity before 2023.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

FreePBX Admin Panel - Detect

FreePBX admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreePBX Admin Panel - Detect', 'description': 'FreePBX...

Fortra GoAnywhere MFT - Authentication Bypass Detection

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication bypass in Fortra's GoAnywhere MFT prior to 7.""" from kittysploit import from...

Palo Alto Expedition - Admin Account Takeover Detection

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. !/usr/bin/env python3 -- coding: utf-8 -- """Missing authentication for a critical function in Palo Alto Networks...

OpenVas Login Panel - Detect

An OpenVas Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An OpenVas Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVas Login Panel - Detect',...

Xeams Admin Console Login Panel - Detect

Xeams Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xeams Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xeams Admin Console Login Panel...

XXLJOB Admin Login Panel - Detect

XXLJOB admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XXLJOB admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XXLJOB Admin Login Panel - Detect',...

SportyBet / BetKing Admin or API Token - Exposure Detection

Detected exposed internal tokens and administrative endpoints belonging to online betting platforms. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed internal tokens and administrative endpoints belonging to online betting platforms.""" import re from kittysploit import from...

PHP LDAP Admin Panel - Detect

Detects PHP LDAP Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP LDAP Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP LDAP Admin Panel - Detect', 'description'...

Vidyo Admin Login Panel - Detect

Vidyo admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vidyo admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vidyo Admin Login Panel - Detect', 'description...