Mako Runtime Error - Page Detection

Detects Mako Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mako Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mako Runtime Error - Page Detection', 'description':...

SpringBoot WhiteLabel Error Page - Detect

Detects SpringBoot WhiteLabel Error Page - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpringBoot WhiteLabel Error Page - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpringBoot WhiteLabel...

MongoDB Exception - Page Detection

Detects MongoDB Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MongoDB Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Exception - Page Detection', 'description':...

Microsoft Runtime Error Page Detection

Detects Microsoft Runtime Error Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Runtime Error Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Runtime Error Page Detection',...

OpenCart Error Log Disclosure Detection

Detected exposed OpenCart error log files that may contain sensitive information including file paths, database errors, PHP warnings, and internal application details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed OpenCart error log files that may contain sensitive information...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit impor...

WordPress Plugin Intuitive Custom Post Order - Full Path Disclosure Detection

WordPress Widget Logic plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Widget Logic plugin files are publicly accessible without...

WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

WordPress Ajax Search Lite - Full Path Disclosure Detection

WordPress Plugin Ajax Search Lite files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ajax Search Lite files are publicly accessible...

WordPress Hostinger Tools - Full Path Disclosure Detection

WordPress Plugin Hostinger Tools files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Hostinger Tools files are publicly accessible...

WordPress Advanced iFrame - Full Path Disclosure Detection

WordPress Advanced iFrame plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Advanced iFrame plugin files are publicly accessible...

CodeIgniter - Error Page Detection

CodeIgniter error debug are enabled. !/usr/bin/env python3 -- coding: utf-8 -- """CodeIgniter error debug are enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CodeIgniter - Error Page Detection', 'description...

ASP.NET Core Development Environment - Exposure Detection

The ASP.NET Core application is running in Development mode, which could exposes detailed error messages and stack traces on the '/Error' page. !/usr/bin/env python3 -- coding: utf-8 -- """The ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

cPanel < 11.109.9999.116 - Cross-Site Scripting Detection

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in cPanel before 11.""" from kittysploit import from lib.protocols.http.httpclient impo...

Cherokee HTTPD <=0.5 - Cross-Site Scripting Detection

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. !/usr/bin/env python3 --...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting that allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit import from...

myfactory FMS - Cross-Site Scripting Detection

myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter. !/usr/bin/env python3 -- coding: utf-8 -- """myfactory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'myfactory FMS - Cross-Site...

Fortinet FortiOS - Cross-Site Scripting Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. !/usr/bin/env python3 -- coding:...

SugarCRM Enterprise 9.0.0 - Cross-Site Scripting Detection

SugarCRM Enterprise 9.0.0 contains a cross-site scripting vulnerability via mobile/error-not-supported-platform.html?desktopurl. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM Enterprise 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress a3 Lazy Load - Full Path Disclosure Detection

WordPress Plugin a3 Lazy Load plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin a3 Lazy Load plugin files are publicly...