Freshrss Admin Dashboard - Exposed Detection

Freshrss Admin Dashboard has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Freshrss Admin Dashboard has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Freshrss Admin Dashboard - Exposed...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS Detection

WordPress LiveChat plugin before 3.7.6 lacked CSRF and authorization checks on the option update handler in the LiveChatAdmin constructor. The code ran on any POST to a wp-admin URL without Referer validation, nonce check, or capability verification. This allowed unauthenticated attackers to upda...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure Detection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of...

Laravel Backpack Admin Login Panel - Detect

Laravel Backpack admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Backpack admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laravel Backpack Admin...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

Western Digital MyCloud NAS - Authentication Bypass Detection

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

NETGEAR Routers - Serial Number Disclosure Detection

Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if ."...

Zenario Admin Login Panel - Detect

Zenario admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zenario admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zenario Admin Login Panel - Detect',...

WordPress EasyCart <2.0.6 - Information Disclosure Detection

WordPress EasyCart plugin before 2.0.6 contains an information disclosure vulnerability. An attacker can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress EasyCart plugin before...

Dahua Web Service Panel - Detect

A Dahua admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Dahua admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dahua Web Service Panel - Detect',...

FatPipe MPVPN - Panel Detect

The admin panel of the FatPipe MPVPN has been discovered. !/usr/bin/env python3 -- coding: utf-8 -- """The admin panel of the FatPipe MPVPN has been discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FatPipe...

Microsoft Exchange Admin Center Login Panel - Detect

Microsoft Exchange Admin Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Admin Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microso...

Royal Event Management System Admin Panel - Detect

Royal Event Management System admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Royal Event Management System admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Royal Event...

FortiOS Admin Login Panel - Detect

FortiOS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiOS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiOS Admin Login Panel - Detect',...

RG-UAC Ruijie - Password Hashes Leak Detection

Multiple Firewall Devices from vendor Ruijie Networks are affected by an information leakage vulnerability where credentials are included in the source code of the web admin login interface usernames, roles, MD5 hashes and additional details of each user. Attackers can use this information to...

Filestash Admin Password Configuration Detection

Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration.""" from kittysploit import from...

Beego Admin Dashboard Panel- Detect

Beego Admin Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Beego Admin Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Beego Admin Dashboard Panel- Detect',...

Netlify CMS Admin Login Panel - Detect

Netlify CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netlify CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netlify CMS Admin Login Panel -...