WordPress WPB Show Core - Cross-Site Scripting Detection

WordPress wpb-show-core plugin through TODO contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected XSS vulnerability exists in the functiongetOpenGraph...

JEHC-BPM - Remote Code Execute Detection

A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM = v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution. !/usr/bin/env python3...

WP Popups - Information Disclosure Detection

WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. !/usr/bin/env python3 -- coding: utf-8 -- """WP Popu...

Cluster Control CMON API - Directory Traversal Detection

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API. !/usr/bin/env python3 -- coding: utf-8 -- """Directory...

TIBCO JasperReports Library - Directory Traversal Detection

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

ETQ Reliance - Reflected XSS via SQLConverterServlet Detection

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

Pagespeed Detection

Detects Pagespeed Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pagespeed Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pagespeed Detection', 'description': 'Detects Pagespeed...

Joomla! Component JProject Manager 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Ternaria Informatica JProject Manager comjprojectmanager component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3...

Draytek VigorConnect 1.6.0-B - Local File Inclusion Detection

Draytek VigorConnect 1.6.0-B3 is susceptible to local file inclusion in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

Joomla! Component Percha Fields Attach 1.0 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding:...

Zitadel - User Registration Bypass Detection

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

MooDating 1.2 - Cross-Site Scripting Detection

A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /friends of the component URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. !/usr/bin/e...

CyberPower - Missing Authentication Detection

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise pri.""" from...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities Detection

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. !/usr/bin/env...

GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability. Detection

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Barcode is a GLPI plugin for printing barcodes and QR...

SaltStack Salt <3002.5 - Auth Bypass Detection

SaltStack Salt before 3002.5 does not honor eauth credentials for the wheelasync client, allowing attackers to remotely run any wheel modules on the master. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack Salt before 3002.""" from kittysploit import from lib.protocols.http.httpclient impor...

Seagate NAS OS 4.3.15.1 - Open Redirect Detection

Seagate NAS OS 4.3.15.1 contains an open redirect vulnerability in echo-server.html, which can allow an attacker to disclose information in the referer header via the state URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate NAS OS 4.""" import re from kittysploit import from...

Samsung WLAN AP WEA453e - Cross-Site Scripting Detection

Samsung WLAN AP WEA453e router contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e router contains a cross-site...

WordPress Call Now Button - Full Path Disclosure Detection

WordPress Plugin Call Now Button files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Call Now Button files are publicly accessible...