CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

CVE-2022-48311

CVE-2022-48311 HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

CVE-2026-84653

A flaw was found in Jenkins. An attacker with Overall/Manage permission can exploit incorrect permission checks in the Appearance configuration page. This allows them to modify configuration options they should not have access to, potentially leading to unauthorized changes within the Jenkins...

CVE-2026-84653: Missing Authorization

Jenkins 2.421 through 2.579 both inclusive, LTS 2.426.1 through 2.568.2 both inclusive does not correctly perform permission checks in the Appearance configuration page, allowing attackers with Overall/Manage permission to modify Appearance configuration options they should not have access to...

Cypress Oxygen Configuration Page - Detect

Cypress Oxygen configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cypress Oxygen configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cypress Oxygen Configuratio...

PHPStan Configuration Page - Detect

PHPStan configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHPStan configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHPStan Configuration Page - Detect',...

Dockerrun AWS Configuration Page - Detect

Dockerrun AWS configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dockerrun AWS configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dockerrun AWS Configuration...

Apache Hive Configuration - Exposure Detection

Detects if the config page of the Apache Hive is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the config page of the Apache Hive is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache...

Saia PCD Web-Server Configuration Page - Detect

Saia PCD Web-Server configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Saia PCD Web-Server configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Saia PCD Web-Serv...

Psalm Configuration Exposure - Detect

Psalm configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Psalm configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Psalm Configuration Exposure - Detect',...

PostgreSQL Cluster - Configuration Detection

PostgreSQL Cluster Configuration Page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """PostgreSQL Cluster Configuration Page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Accueil WAMPSERVER Configuration Page - Detect

Accueil WAMPSERVER configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Accueil WAMPSERVER configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accueil WAMPSERVER...

AppVeyor Configuration Page - Detect

AppVeyor configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AppVeyor configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AppVeyor Configuration Page - Detect',...

Apache Airflow Configuration Page - Detect

Apache Airflow configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Airflow configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Airflow Configuratio...

Metasploit Setup and Configuration Page - Detect

Metasploit setup and configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Metasploit setup and configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metasploit Setu...

PHP-FPM Configuration Page - Detect

PHP-FPM configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-FPM configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Configuration Page - Detect',...

Cisco System Network Configuration Page - Detect

Cisco System Network configuration page was detected. Page lists whole network configuration and internal logs of Cisco IP phones. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco System Network configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient impor...

EUVD-2026-48744

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...

CVE-2026-55985

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...