Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA...

Bagisto Installer Exposure Detection

Bagisto is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Bagisto is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Tenable Nessus Panel - Detect

Tenable Nessus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tenable Nessus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tenable Nessus Panel - Detect', 'description': 'Tenab...

Apache OFBiz <=16.11.07 - Cross-Site Scripting Detection

Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized. !/usr/bin/env python3 -- coding: utf-8 -- """Apache OFBiz 16.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Drone - Configuration Detection

Drone configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Drone configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone - Configuration Detection', 'description':...

Fortinet FGFM protocol - Detect

FortiGate to FortiManager Protocol FGFM was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiGate to FortiManager Protocol FGFM was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...

Analytify <4.2.1 - Cross-Site Scripting Detection

WordPress Analytify 4.2.1 does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Analytify 4.""" from kittysploit import from...

Anchor CMS 0.12.3 - Error Log Exposure Detection

Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. !/usr/bin/env python3 -- coding: utf-8 --...

Stirling PDF Panel - Detect

Stirling PDF panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Stirling PDF panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Stirling PDF Panel - Detect', 'description': 'Stirlin...

Caddy 2.4.6 - Open Redirect Detection

Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Caddy 2.""" import re from...

SonicWall SMA1000 LFI Detection

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. !/usr/bin/env python3 -- coding: utf-8 -- """Pre-authentication path traversal vulnerabilit...

Vodafone Vox UI Login Panel - Detect

Vodafone Vox UI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vodafone Vox UI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vodafone Vox UI Login Panel - Detect',...

Apache httpd Config File - Detect

Apache httpd configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache httpd configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache httpd Conf...

ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation Detection

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...

Appsuite Login Panel - Detect

Detects Appsuite Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Appsuite Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Appsuite Login Panel - Detect', 'description'...

Normhost Backup Server Manager Panel - Detect

Normhost Backup server manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Normhost Backup server manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Normhost Backup Serve...

Ampache Update Page Exposure Detection

Ampache update page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache update page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Update Page Exposure Detection', 'description':...

DocuWare - Detect

DocuWare panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DocuWare panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DocuWare - Detect', 'description': 'DocuWare panel was detected.'...

Wuzhicms Detected

Wuzhicms was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wuzhicms was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wuzhicms Detected', 'description': 'Wuzhicms was detected.', 'author':...

NcFTPd Service - Detect

NcFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NcFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'NcFTPd Service - Detect',...