DD-WRT - Router Panel Detection

DD-WRT router management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """DD-WRT router management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DD-WRT - Router Panel Detection',...

Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting Detection

Event Espresso Core-Reg 4.10.7.p is vulnerable to cross-site scripting in wp-content/plugins/event-espresso-core-reg/adminpages/messages/templates/eemsgadminoverview.template.php and allows remote attackers to inject arbitrary web script or HTML via the page parameter. !/usr/bin/env python3 --...

Winstone Servlet Engine Detection

Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Winstone Servlet Engine via the Server or X-Powered-By headers.""" import re from kittysploit import from...

QCube Cross-Site-Scripting Detection

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting vulnerability in...

twitter-server Cross-Site Scripting Detection

twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala. !/usr/bin/env python3 -- coding: utf-8 -- """twitter-serve...

Iomega LenovoEMC NAS Login Panel - Detect

Iomega LenovoEMC NAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Iomega LenovoEMC NAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Iomega LenovoEMC NAS Login...

TP-Link Archer A20 v3 Router - Cross-site Scripting Detection

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

Atmail 6.5.0 - Cross-Site Scripting Detection

Atmail 6.5.0 contains a cross-site scripting vulnerability via the index.php/admin/index/ 'error' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Atmail 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atma...

Redmine Configuration File - Detect

Redmine configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Redmine configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Redmine Configuration File - Detect',...

Tomcat Stack Traces Enabled Detection

Examine whether Tomcat stack traces are turned on by employing a designated problematic pattern. !/usr/bin/env python3 -- coding: utf-8 -- """Examine whether Tomcat stack traces are turned on by employing a designated problematic pattern.""" from kittysploit import from...

Strapi CMS Documentation Login Panel - Detect

Strapi CMS Documentation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strapi CMS Documentation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strapi CMS...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

HP Color LaserJet Detection

HP color laserJet panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP color laserJet panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Color LaserJet Detection', 'description': 'H...

Jeecg-boot 3.5.0 qurestSql - SQL Injection Detection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. !/usr/bin/env python3 -- coding: utf-8 -- ""...

WordPress Load More Anything - Full Path Disclosure Detection

WordPress Plugin Load More Anything files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Load More Anything files are publicly accessibl...

D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...

RaspberryMatic Login Panel - Detect

RaspberryMatic login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RaspberryMatic login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RaspberryMatic Login Panel - Detect',...

Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion Detection

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in t...

Keycloak JSON File Detection

Detects Keycloak JSON File. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Keycloak JSON File.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keycloak JSON File Detection', 'description': 'Detects Keycloak JSO...

Kubelet Stats Detection

Scans for kubelet stats !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet stats.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Stats Detection', 'description': 'Scans for kubelet stats',...