Google Cloud Run Default Page Detection

Detects Google Cloud Run Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Cloud Run Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Run Default Page Detection',...

Netsweeper 4.0.5 - Default Weak Account Detection

The Web Panel in Netsweeper before 4.0.5 has a default password of 'branding' for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/. !/usr/bin/env python3 -- coding: utf-8 -- """The Web Panel in Netsweeper before 4.""" from kittysploit...

Coming Soon Page Detect

Detects Coming Soon Page Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Coming Soon Page Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Coming Soon Page Detect', 'description': 'Detects Coming...

Brickcom Camera - Default Login Detection

Detected Brickcom IP cameras accessible using default credentials admin/admin. Successful authentication exposed full camera configuration, live video streams, LED control, and network settings to remote attackers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras accessib...

Citrix Hypervisor Page Detection

Detects Citrix Hypervisor Page Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Citrix Hypervisor Page Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix Hypervisor Page Detection',...

Cloudflare Speedtest - Detect

Detected the exposed default page of the Cloudflare Speedtest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the Cloudflare Speedtest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

MODx manager - Local File Inclusion Detection

A directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter when magicquotesgpc is disabled. !/usr/bin/env python3 -- coding: utf-8 -...

Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection

Wireless Multiplex Terminal Playout Server =20.2.8 has a default account with a password of pokon available via its web administrative interface. !/usr/bin/env python3 -- coding: utf-8 -- """Wireless Multiplex Terminal Playout Server =20.""" from kittysploit import from...

Magento Mass Importer <0.7.24 - Remote Auth Bypass Detection

Magento Mass Importer aka MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. !/usr/bin/env python3 -- coding: utf-8 -- """Magento Mass Importer aka MAGMI versions prior to 0."""...

WAGO Web based Management - Default Login Detection

Identified WAGO Web-Based Management interfaces that were accessible using default credentials admin:wago.These interfaces are used to configure and monitor WAGO programmable logic controllers PLCs and automation systems. Use of factory-default credentials exposed critical OT infrastructure to...

Wildfly - Default Admin Login Detection

Wildfly default admin login credentials were successful. !/usr/bin/env python3 -- coding: utf-8 -- """Wildfly default admin login credentials were successful.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wildfly -...

CuppaCMS v1.0 - Local File Inclusion Detection

Cuppa CMS v1.0 is vulnerable to local file inclusion via the component /templates/default/html/windows/right.php. !/usr/bin/env python3 -- coding: utf-8 -- """Cuppa CMS v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

mantisbt - Anonymous Login Detection

mantisbt Anonymous login were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """mantisbt Anonymous login were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mantisbt - Anonymous Login Detection',...

SAP NetWeaver Portal - Detect

SAP NetWeaver Portal login has been detected. Note that NetWeaver has multiple default passwords as listed in the references. !/usr/bin/env python3 -- coding: utf-8 -- """SAP NetWeaver Portal login has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Azure Function App - Default Page Detection

Detects Azure Function App - Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Function App - Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Function App - Default Page...

Drupal Install Detection

Drupal Install panel exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal Install panel exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drupal Install Detection', 'description': 'Drupal Install panel...

CVE-2026-9680

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

CVE-2026-9680 MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

CVE-2026-9680

The CVE concerns alibabacloud-rds-openapi-mcp-server where an MCP endpoint bound to all network interfaces by default exposes MCP tools. Root cause: improper exposure caused by insecure default binding. Impact: remote attackers can access exposed MCP tools via network without authentication? The ...

CVE-2026-9680

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...