Xerox DC260 EFI Fiery Controller Webtools 2.0 - Local File Inclusion Detection

Xerox DC260 EFI Fiery Controller Webtools 2.0 is vulnerable to local file inclusion because input passed thru the 'file' GET parameter in 'forceSave.php' script is not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files ...

Tuxedo Connected Controller Login Panel - Detect

Tuxedo Connected Controller login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tuxedo Connected Controller login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tuxedo Connecte...

SEL Real-Time Automation Controller - Login Panel Detection

Schweitzer Engineering Laboratories SEL Real-Time Automation Controller RTAC is a programmable automation controller used in electric utility and industrial automation environments for protection, control, and automation. The web interface exposes a management panel for configuration and...

Morningstar ProStar MPPT Solar Charge Controller - Detect

Morningstar ProStar MPPT is a solar charge controller with a built-in web server providing live data monitoring for off-grid and industrial solar installations. The exposed interface displays real-time array, battery, and load data without authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Phoenix Contact CHARX SEC-3XXX AC Charging Controller Panel - Detect

Phoenix Contact CHARX SEC-3XXX AC Charging Controller panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Contact CHARX SEC-3XXX AC Charging Controller panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Phoenix Contact CHARX SEC-3XXX AC Controller < 1.7.3 - Multiple Vulnerabilities Detection

Multiple vulnerabilities exist in Phoenix Contact CHARX SEC-3XXX AC Controller versions prior to 1.7.3. Successful exploitation may allow attackers to bypass authentication, disclose sensitive information, or execute arbitrary code. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple...

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

Aviatrix Cloud Controller Panel Detection

An Aviatrix Cloud Controller login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Aviatrix Cloud Controller login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aviatrix Clou...

mojoPortal <=2.9.0.1 - Directory Traversal Detection

mojoPortal =2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this vulnerability to access the Web.Config file and obtain the MachineKey. !/usr/bin/env python3 -- coding: utf-8 -- """mojoPortal =2.""" from kittysploit...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. !/usr/bin/env python3 -- coding: utf-8 -- """Progress ShareFile Storage Zones Controller -...

DEOS OPEN 500EMS Controller - Admin Exposure Detection

The DEOS OPEN 500EMS controller exposes administrative functions without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The DEOS OPEN 500EMS controller exposes administrative functions without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Deskpro On-Premise Controller - Default Page Detect

Deskpro On-Premise Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro On-Premise Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro On-Premis...

Webkul QloApps 1.6.0 - Cross-site Scripting Detection

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated Cross-Site Scripting XSS...

Deskpro Private Controller - Default Page Detect

Deskpro Private Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro Private Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro Private...

Detect Dell iDRAC9

The Integrated Dell Remote Access Controller iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """The Integrated Dell Remote Access Controller iDRAC is design...

Espec Web Controller - Panel Detection

Espec Web Controller panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Espec Web Controller panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Espec Web Controller - Panel...

Joomla! Component com_sef - Local File Inclusion Detection

A local file inclusion vulnerability in the Jvehicles comjvehicles component version 1.0 for Joomla! allows remote attackers to load arbitrary files via the controller parameter in index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in the Jvehicles...

Lenovo Fan Power Controller Login Panel - Detect

Lenovo Fan Power Controller login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo Fan Power Controller login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lenovo Fan Powe...

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

kkFileView 4.0.0 - Cross-Site Scripting Detection

kkFileView 4.0.0 contains multiple cross-site scripting vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java. !/usr/bin/env python3 -- coding: utf-8 -- """kkFileView 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...