WordPress Plugin iThemes Security - Full Path Disclosure Detection

WordPress Plugin iThemes Security files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin iThemes Security files are publicly accessible...

Twig Runtime Error - Page Detection

Detects Twig Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Twig Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Twig Runtime Error - Page Detection', 'description':...

WordPress Elementor Pro - Full Path Disclosure Detection

WordPress Plugin Elementor Pro plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Pro plugin files are publicly...

WordPress Plugin Google Tag Manager - Full Path Disclosure Detection

WordPress Plugin Google Tag Manager files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Google Tag Manager files are publicly accessibl...

WordPress Duplicate Page - Full Path Disclosure Detection

WordPress Plugin Duplicate Page files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Duplicate Page files are publicly accessible withou...

WordPress Menu Image - Full Path Disclosure Detection

WordPress Plugin Menu Image plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Menu Image plugin files are publicly accessible...

WordPress Twenty Sixteen - Full Path Disclosure Detection

WordPress Twenty Sixteen theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Twenty Sixteen theme files are publicly accessible without...

WordPress Plugin SG Optimizer - Full Path Disclosure Detection

WordPress Plugin SG Optimizer Plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin SG Optimizer Plugin files are publicly...

WordPress Members / Membership & User Role Editor Plugin - Error Log Disclosure Detection

WordPress Members plugin is vulnerable to error log disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Members plugin is vulnerable to error log disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Plugin Max Mega Menu (megamenu) - Full Path Disclosure Detection

WordPress Plugin Max Mega Menu plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Max Mega Menu plugin files are publicly...

WordPress Members Plugin - Debug/Error Log Disclosure Detection

The WordPress Members plugin exposes error/debug log files that may contain sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Members plugin exposes error/debug log files that may contain sensitive information.""" import re from kittysploit import from...

Yii Error Page - Detct Detection

Yii An application framework to handle and manage errors error page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Yii An application framework to handle and manage errors error page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Twenty Seventeen - Full Path Disclosure Detection

WordPress Twenty Seventeen theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Twenty Seventeen theme files are publicly accessible...

WordPress WPFront Scroll Top - Full Path Disclosure Detection

WordPress Plugin WPFront Scroll Top plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPFront Scroll Top plugin files are...

Pi-hole Reflected XSS in 404-Error Page Detection

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. !/usr/bin/env python3 --...

Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting Detection

Apache HTTP Server versions 2.4.0 through 2.4.39 are vulnerable to a limited cross-site scripting issue affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server...

Delphi MVC Exception - Page Detection

Detects Delphi MVC Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Delphi MVC Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delphi MVC Exception - Page Detection',...

WordPress Events Manager - Full Path Disclosure Detection

WordPress WP Super Cache plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Super Cache plugin files are publicly accessible withou...

SAP Logon Error Message Detection

Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code.""" from kittysploit import from...

SpringBoot WhiteLabel Error Page - Detect

Detects SpringBoot WhiteLabel Error Page - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpringBoot WhiteLabel Error Page - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpringBoot WhiteLabel...