115237 matches found
Oracle Application Server Containers Detection
Detects Oracle Application Server Containers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Application Server Containers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Application Server...
Default Web Application Detection
Catch-all for detecting default installations of web applications using common phrases found in default install pages !/usr/bin/env python3 -- coding: utf-8 -- """Catch-all for detecting default installations of web applications using common phrases found in default instal.""" from kittysploit...
Spring Boot `X-Application-Context` Header Exposure Detection
Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...
Application Management Panel - Detect
Application Management Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Application Management Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Application Management Panel - Detect...
Gitea - User Enumeration Detection
Enumerates the users registered in the Gitea web application, a self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerates the users registered in the Gitea web...
Codeigniter Application Installer Exposure Detection
Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from...
WordPress Candidate Application Form <= 1.3 - Local File Inclusion Detection
WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Candidate Application Form = 1.""" import re from kittysploit import from...
Dify Panel Detection
Detects Dify LLM application platform panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Dify LLM platform panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Dify Panel Detection", "description": "Detect...
Sangfor Next Gen Application Firewall - Arbitary File Read Detection
Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file .""" import re from...
Generic Database File - Exposure Detection
This is collection of some web frameworks recommendation or default configuration for SQLite database file location. If this file is publicly accessible due to server misconfiguration, it could result in application data leak including users sensitive data, password hashes etc. !/usr/bin/env...
CVE-2026-63301 Denial of Service in Quick.CMS
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
CVE-2026-63301
In Quick.CMS, the language-deletion API endpoint lacks server-side authorization, allowing an authenticated administrator to delete the primary language via a direct request and cause application DoS. When combined with CSRF (CVE-2026-1468), an unauthenticated attacker can craft a malicious link ...
EUVD-2026-49754
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
EUVD-2026-49738
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
Exploit for Insertion of Sensitive Information into Log File in Ayesa Ibermatica_Rps
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security...
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a security bypass vulnerability
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a security bypass vulnerability CVE-2026-10842 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...
SafeLine v9.3.11
SafeLine - Make your web apps secure ๐ Website | ๐ Docs | ๐ Live Demo | ๐โโ๏ธ Discord | ไธญๆ็ ๐ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
EUVD-2021-34855
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...
PT-2026-65580
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.7 Description A denial of service issue exists in the HTTP channel caused by...