EUVD-2026-50113

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

CVE-2026-11351: Exposure of Sensitive Information to an Unauthorized Actor

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

SAP Analytics Cloud Panel - Detect

SAP Analytics Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Analytics Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Analytics Cloud Panel - Detect',...

SonicWall Analytics - Login Panel Detection

SonicWall Analytics formerly SGMS is SonicWall's centralised network security analytics and reporting platform used to aggregate and visualise threat data across SonicWall firewall deployments. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analytics formerly SGMS is SonicWall's centralis...

Matomo (Piwik) RUM - Tech Detect

Detects Matomo formerly Piwik Web Analytics & RUM artifacts. Identifies Standard Tracking, Image Tracking, Tag Manager, and Cloud instances using strict matching. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matomo formerly Piwik Web Analytics & RUM artifacts.""" import re from kittysploi...

Versa Analytics Server Detection

Detects Versa Analytics Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Versa Analytics Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa Analytics Server Detection',...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

Hitachi Pentaho Business Analytics Server - Bypass Authorization Detection

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. !/usr/bin/env python3 -- coding: utf-8 -- """Hitachi Vantara Pentaho Business Analytics Server versions before...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Planning Analytics versions 2.""" fr...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...

Davantis Video Analytics Panel - Detect

Davantis Video Analytics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Davantis Video Analytics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Davantis Video Analytics Panel -...

Hotjar RUM - Detect

Detects Hotjar Web Analytics & Session Recording artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hotjar Web Analytics & Session Recording artifacts.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Mixpanel Analytics - Detect

Detected the presence of Mixpanel, a business analytics service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Mixpanel, a business analytics service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Piwik/Matomo - Unauthenticated Access Detection

Detected Piwik/Matomo instances exposing analytics data without authentication. When anonymous access was enabled, the API returned visitor statistics, page views, and other sensitive analytics data using the anonymous token. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Piwik/Matomo...

ZOHO ManageEngine Analytics Plus Panel - Detect

ZOHO ManageEngine analytics plus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine analytics plus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

Veritas NetBackup OpsCenter Analytics Login - Detect

A Veritas NetBackup OpsCenter Analytics page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Veritas NetBackup OpsCenter Analytics page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Verit...

Ackee Panel Detection

Detects Ackee self-hosted analytics login panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Ackee analytics panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Ackee Panel Detection", "description":...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...