txAdmin Panel - Detect

txAdmin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """txAdmin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'txAdmin Panel - Detect', 'description': 'txAdmin panel was...

GoCD Login Panel - Detect

GoCD login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GoCD login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GoCD Login Panel - Detect', 'description': 'GoCD login panel...

Mixpost Auth Login - Panel Detect

Mixpost authentication interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Mixpost authentication interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mixpost Auth Login - Pane...

Basic Auth Detection

Detects Basic Auth Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Basic Auth Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Basic Auth Detection', 'description': 'Detects Basic...

Agentejo Cockpit <0.12.0 - NoSQL Injection Detection

Agentejo Cockpit prior to 0.12.0 is vulnerable to NoSQL Injection via the newpassword method of the Auth controller, which is responsible for displaying the user password reset form. !/usr/bin/env python3 -- coding: utf-8 -- """Agentejo Cockpit prior to 0.""" import re from kittysploit import fro...

WP Cerber < 8.9.3 - Broken Access Control Detection

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. !/usr/bin/env python3 -- coding: utf-8 -- """WP Cerber 8."""...

PlaceOS 1.2109.1 - Open Redirection Detection

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. !/usr/bin/env python3 -- coding: utf-8 -- """PlaceOS Authentication Service before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Airflow Experimental <1.10.11 - REST API Auth Bypass Detection

Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Airflow's Experimental API prior 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Magento Mass Importer <0.7.24 - Remote Auth Bypass Detection

Magento Mass Importer aka MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. !/usr/bin/env python3 -- coding: utf-8 -- """Magento Mass Importer aka MAGMI versions prior to 0."""...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting Detection

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchange Server is vulnerable to a spoofing vulnerability.""" from kittysploit import from lib.protocols.http.httpclient...

Hitachi Pentaho Business Analytics Server - Bypass Authorization Detection

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. !/usr/bin/env python3 -- coding: utf-8 -- """Hitachi Vantara Pentaho Business Analytics Server versions before...

WordPress API Bearer Auth <20190907 - Cross-Site Scripting Detection

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting...

strapi CMS <3.0.0-beta.17.5 - Admin Password Reset Detection

strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. !/usr/bin/env python3 -- coding: utf-8 -- """strapi CMS before 3.""" from...

Palo Alto Expedition - Admin Account Takeover Detection

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. !/usr/bin/env python3 -- coding: utf-8 -- """Missing authentication for a critical function in Palo Alto Networks...

Modular DS - Broken Access Control

Modular Connector login endpoint issues wordpressloggedin cookie without auth. !/usr/bin/env python3 -- coding: utf-8 -- """Modular DS - Broken Access Control""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Casdoor - Authorization Bypass Detection

Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor up to 1.""" from kittysploit import from...

Discourse OAuth Social Login - Cross-site Scripting

Discourse ", for path in paths...

Weaver e-cology verifyquicklogin.jsp - Auth Bypass Detection

There is an arbitrary administrator login vulnerability in the Panwei OA E-Cology VerifyQuickLogin.jsp file. An attacker can obtain the administrator Session by sending a special request package. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary administrator login vulnerability ...

Passbolt Login Panel Detection

Passbolt login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Passbolt login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Passbolt Login Panel Detection', 'description':...

SonicWall Analyzer Login Panel - Detect

SonicWall Analyzer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analyzer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall Analyzer Login Panel -...