Uptime Kuma - Installer Detection

Detected Uptime Kuma setup page is publicly accessible with needSetup enabled, allowing unauthenticated users to complete installation and gain full admin access by access /setup-database. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Uptime Kuma setup page is publicly accessible with...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure Detection

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. !/usr/bin/e...

Kong Admin <=2.03 - Admin API Access Detection

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Kong Admin through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Craft CMS Admin Login Panel - Detect

Craft CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Craft CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Craft CMS Admin Login Panel - Detect',...

CirCarLife - Installer Detection

A CirCarLife admin panel was accessed. CirCarLife is an internet-connected electric vehicle charging station !/usr/bin/env python3 -- coding: utf-8 -- """A CirCarLife admin panel was accessed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Flock Safety Camera Admin Panel - Detect

Detected the Flock Safety camera admin panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the Flock Safety camera admin panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flock Safety Camera Admin Panel...

Camaleon CMS Login - Panel Detection

Camaleon CMS admin login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Camaleon CMS admin login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Camaleon CMS Login - Panel...

Novius OS 5.0.1-elche - Open Redirect Detection

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. !/usr/bin/env python3 -- coding: utf-8 -- """Novius OS 5.""" import re from kittysploit import from...

WordPress EasyCart <2.0.6 - Information Disclosure Detection

WordPress EasyCart plugin before 2.0.6 contains an information disclosure vulnerability. An attacker can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress EasyCart plugin before...

WordPress Slider Revolution - Local File Disclosure Detection

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734...

Jira Unauthenticated Admin Projects Detection

Detects Jira Unauthenticated Admin Projects. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jira Unauthenticated Admin Projects.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Unauthenticated Admin Projec...

Laravel Nova - Unauthenticated Admin Panel Access Detection

Laravel Nova admin panel is accessible without authentication. Nova provides full CRUD access to application models and database records, making unauthenticated access a critical security risk. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Nova admin panel is accessible without...

Lucee - Unset Credentials Detection

The Lucee admin panel has a first-time setup page which allows any user to set the administrator password. !/usr/bin/env python3 -- coding: utf-8 -- """The Lucee admin panel has a first-time setup page which allows any user to set the administrator password.""" from kittysploit import from...

Magento Admin Login Panel - Detect

Magento admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Magento admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magento Admin Login Panel - Detect',...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Windows Admin Center Panel - Detection

Detect Windows Admin Center Panel web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Windows Admin Center Panel web interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Windows Admin Center Pane...

Fortra GoAnywhere MFT - Authentication Bypass Detection

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication bypass in Fortra's GoAnywhere MFT prior to 7.""" from kittysploit import from...

FreePBX Admin Panel - Detect

FreePBX admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreePBX Admin Panel - Detect', 'description': 'FreePBX...

Live Helper Chat Admin Login Panel - Detect

Live Helper Chat admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Live Helper Chat admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Admin...

Monstra Admin Panel - Detect

Monstra admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Monstra admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monstra Admin Panel - Detect', 'description': 'Monstra...