OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

Openfire Admin Console Login Panel - Detect

Openfire Admin Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Openfire Admin Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Openfire Admin Console...

Opengear Management Console Login Panel - Detect

The Opengear Management Console admin panel has been discovered. !/usr/bin/env python3 -- coding: utf-8 -- """The Opengear Management Console admin panel has been discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

OpenVas Login Panel - Detect

An OpenVas Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An OpenVas Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVas Login Panel - Detect',...

Budibase - Admin Installer Detection

Detected Budibase admin setup checklist endpoint was publicly accessible with no admin user created, allowing unauthenticated users to complete setup and gain full platform control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Budibase admin setup checklist endpoint was publicly accessib...

ChromaDB Installer - Detected

Detects the presence of the ChromaDB admin interface.The endpoint reveals connection details and authentication type. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the ChromaDB admin interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Netsweeper - Authentication Bypass Detection

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. !/usr/bin/env python3 -- coding: utf-8 -- """The Client Filt...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress Admin Font Editor <=1.8 - Cross-Site Scripting Detection

WordPress Admin Font Editor plugin indexisto 1.8 and before contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Apollo Admin Service - Unauthenticated Access Detection

ApolloAdminservice was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """ApolloAdminservice was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Beszel Unfinished Installation Detection

Detected Beszel server monitoring hub had an unfinished installation with no admin account configured, allowing attackers to create an admin account and gain full control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Beszel server monitoring hub had an unfinished installation with no adm...

Bootstrap Admin Panel Template Panel - Detect

Bootstrap Admin Panel Template panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bootstrap Admin Panel Template panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bootstrap Admin Panel...

Ace Admin Dashboard - Detect

Ace Admin dashboard page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ace Admin dashboard page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ace Admin Dashboard - Detect', 'description':...

Calendarix Admin Login Panel - Detect

Calendarix admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Calendarix admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Calendarix Admin Login Panel - Detect...

CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

WordPress Admin Font Editor <=1.8 - Cross-Site Scripting Detection

WordPress Admin Font Editor 1.8 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Claris FileMaker Server Admin Console - Detect

Claris FileMaker Server Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Claris FileMaker Server Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Claris...

CouchDB Admin Default - Detect

CouchDB is susceptible to requests in the context of an admin user. !/usr/bin/env python3 -- coding: utf-8 -- """CouchDB is susceptible to requests in the context of an admin user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

WordPress Church Admin <0.810 - Cross-Site Scripting Detection

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin plugin before 0.""" from kittysploit...

Beego Admin Dashboard Panel- Detect

Beego Admin Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Beego Admin Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Beego Admin Dashboard Panel- Detect',...