Joomla! Component Juke Box 1.7 - Local File Inclusion Detection

A directory traversal vulnerability in the JOOFORGE Jutebox comjukebox component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in t...

Joomla! Component Shoutbox Pro - Local File Inclusion Detection

A directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Shoutbox Pro...

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Gadget Factory comgadgetfactory component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in joomlaflickr.php in the Joomla! Flickr comjoomlaflickr component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

kkFileView 4.1.0 - Cross-Site Scripting Detection

kkFileView 4.1.0 is susceptible to cross-site scripting via the url parameter at /controller/OnlinePreviewController.java. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

kkFileView 4.1.0 - Cross-Site Scripting Detection

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java. !/usr/bin/env python3 -- coding: utf-8 -- """kkFileView 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Webkul QloApps 1.6.0 - Cross-site Scripting Detection

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated Cross-Site Scripting XSS...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Detection

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 is susceptible to local file inclusion because of insecure handling of a download function that leads to disclosure of internal files due to path traversal with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Franklin...

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

Rustici Content Controller Panel - Detect

Rustici Content Controller panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rustici Content Controller panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rustici Content Controller...

Espec Web Controller - Panel Detection

Espec Web Controller panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Espec Web Controller panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Espec Web Controller - Panel...

EVlink Local Controller - Detection

Detects EVlink Local Controller - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EVlink Local Controller - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EVlink Local Controller -...

DEOS OPEN 500EMS Controller - Admin Exposure Detection

The DEOS OPEN 500EMS controller exposes administrative functions without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The DEOS OPEN 500EMS controller exposes administrative functions without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Deskpro Private Controller - Default Page Detect

Deskpro Private Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro Private Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro Private...

mojoPortal <=2.9.0.1 - Directory Traversal Detection

mojoPortal =2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this vulnerability to access the Web.Config file and obtain the MachineKey. !/usr/bin/env python3 -- coding: utf-8 -- """mojoPortal =2.""" from kittysploit...

Detect Dell iDRAC9

The Integrated Dell Remote Access Controller iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """The Integrated Dell Remote Access Controller iDRAC is design...

Joomla! Component com_sef - Local File Inclusion Detection

A local file inclusion vulnerability in the Jvehicles comjvehicles component version 1.0 for Joomla! allows remote attackers to load arbitrary files via the controller parameter in index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in the Jvehicles...

Xerox DC260 EFI Fiery Controller Webtools 2.0 - Local File Inclusion Detection

Xerox DC260 EFI Fiery Controller Webtools 2.0 is vulnerable to local file inclusion because input passed thru the 'file' GET parameter in 'forceSave.php' script is not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files ...

Phoenix Contact CHARX SEC-3XXX AC Charging Controller Panel - Detect

Phoenix Contact CHARX SEC-3XXX AC Charging Controller panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Contact CHARX SEC-3XXX AC Charging Controller panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...