Palo Alto Expedition - Admin Account Takeover Detection

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. !/usr/bin/env python3 -- coding: utf-8 -- """Missing authentication for a critical function in Palo Alto Networks...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal Detection

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. !/usr/bin/env python3 -- coding: utf-8 -- """TRUfusion Enterprise versions...

Trinity Audio <= 5.21.0 - Information Exposure Detection

The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the /admin/inc/phpinfo.php file that gets created on install. This makes it possible for...

Zenario Admin Login Panel - Detect

Zenario admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zenario admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zenario Admin Login Panel - Detect',...

Shopware CMS detect

Detects Shopware CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shopware CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shopware CMS detect', 'description': 'Detects Shopware CMS', 'author':...

TemboSocial Admin Panel - Detect

TemboSocial Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TemboSocial Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TemboSocial Admin Panel - Detect', 'description...

V2924 Admin Login Panel - Detect

V2924 admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """V2924 admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'V2924 Admin Login Panel - Detect', 'description...

Kae's File Manager Admin Login Panel - Detect

Kae's File Manager admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kae's File Manager admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': "Kae's File Manager...

MachForm Admin Panel - Detect

MachForm Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MachForm Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MachForm Admin Panel - Detect', 'description':...

Magento Connect Manager Installer - Detect

Magento Connect Manager installer was detected. The software, available via /downloader/ location, requires Magento admin rights and uses the same authorization methods as for backend. If an attacker locates a matching pair of login/password, the installation will be compromised. An attacker can...

Microsoft Exchange Admin Center Login Panel - Detect

Microsoft Exchange Admin Center login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Admin Center login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microso...

MistServer Installation Wizard - Exposure Detection

MistServer installation/setup wizard is publicly accessible, allowing unauthorized users to create admin accounts and take full control of the streaming server. This is a first-user-wins vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """MistServer installation/setup wizard is publicly...

NETGEAR Routers - Serial Number Disclosure Detection

Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple NETGEAR router models disclose their serial number which can be used to obtain the admin password if ."...

Opentwrt luCI - Admin Login Page Detection

An Opentwrt admin login page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Opentwrt admin login page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Opentwrt luCI - Admin Login Page...

PHP LDAP Admin Panel - Detect

Detects PHP LDAP Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP LDAP Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP LDAP Admin Panel - Detect', 'description'...

Polycom Admin Panel - Detect

Polycom admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Polycom admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polycom Admin Panel - Detect', 'description': 'Polycom...

Pulsar360 Admin Panel - Detect

Pulsar360 admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pulsar360 admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pulsar360 Admin Panel - Detect', 'description':...

SAP HANA XS Engine Admin Login Panel - Detect

SAP HANA XS Engine admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP HANA XS Engine admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP HANA XS Engine...

Synnefo Admin Login Panel - Detect

Synnefo Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Synnefo Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Synnefo Admin Login Panel - Detect',...

Tenda 11n Wireless Router - Admin Panel Detection

The administrative panel for a Tenda Technology 11n Wireless Router was found. !/usr/bin/env python3 -- coding: utf-8 -- """The administrative panel for a Tenda Technology 11n Wireless Router was found.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...