WordPress Coming Soon Page - Full Path Disclosure Detection

WordPress Coming Soon Page & Maintenance Mode plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Coming Soon Page & Maintenance Mode...

WordPress Plugin SG Optimizer - Full Path Disclosure Detection

WordPress Plugin SG Optimizer Plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin SG Optimizer Plugin files are publicly...

WordPress ManageWP Worker - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

Yii Error Page - Detct Detection

Yii An application framework to handle and manage errors error page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Yii An application framework to handle and manage errors error page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Delphi MVC Exception - Page Detection

Detects Delphi MVC Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Delphi MVC Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delphi MVC Exception - Page Detection',...

SpringBoot WhiteLabel Error Page - Detect

Detects SpringBoot WhiteLabel Error Page - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpringBoot WhiteLabel Error Page - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpringBoot WhiteLabel...

ASP.NET Core Development Environment - Exposure Detection

The ASP.NET Core application is running in Development mode, which could exposes detailed error messages and stack traces on the '/Error' page. !/usr/bin/env python3 -- coding: utf-8 -- """The ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

CodeIgniter - Error Page Detection

CodeIgniter error debug are enabled. !/usr/bin/env python3 -- coding: utf-8 -- """CodeIgniter error debug are enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CodeIgniter - Error Page Detection', 'description...

Cherokee HTTPD <=0.5 - Cross-Site Scripting Detection

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. !/usr/bin/env python3 --...

Adobe ColdFusion Detector

With this template we can detect a running ColdFusion instance due to an error page. !/usr/bin/env python3 -- coding: utf-8 -- """With this template we can detect a running ColdFusion instance due to an error page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Fortinet FortiOS - Cross-Site Scripting Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. !/usr/bin/env python3 -- coding:...

myfactory FMS - Cross-Site Scripting Detection

myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter. !/usr/bin/env python3 -- coding: utf-8 -- """myfactory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'myfactory FMS - Cross-Site...

Atmail 6.5.0 - Cross-Site Scripting Detection

Atmail 6.5.0 contains a cross-site scripting vulnerability via the index.php/admin/index/ 'error' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Atmail 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atma...

Pi-hole Reflected XSS in 404-Error Page Detection

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. !/usr/bin/env python3 --...

Database Error Detection

Detects Database Error. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Database Error.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Database Error Detection', 'description': 'Detects Database Error.',...

Atlassian Jira Confluence - Cross-Site Scripting Detection

Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting that allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit import from...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit impor...

Anchor CMS 0.12.3 - Error Log Exposure Detection

Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. !/usr/bin/env python3 -- coding: utf-8 --...

SugarCRM Enterprise 9.0.0 - Cross-Site Scripting Detection

SugarCRM Enterprise 9.0.0 contains a cross-site scripting vulnerability via mobile/error-not-supported-platform.html?desktopurl. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM Enterprise 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...