N-able N-central < 2024.2 - Authentication Bypass Detection

N-central server versions prior to 2024.2 contain an authentication bypass in the user interface, letting attackers access restricted areas without proper credentials, exploit requires no specific conditions. !/usr/bin/env python3 -- coding: utf-8 -- """N-central server versions prior to 2024."""...

Open Journal Systems Detect

Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed academic journals, created by the Public Knowledge Project. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed...

Jira Server and Data Center - Information Disclosure Detection

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection Detection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Maximo Asset Manageme...

IceWarp 11.4.6.0 - Cross-Site Scripting Detection

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Express-handlebars - Local File Inclusion Detection

Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

Svnserve Configuration File - Detect

Svnserve configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Svnserve configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Svnserve Configuration File - Detect',...

CData Arc < 23.4.8839 - Path Traversal Detection

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Prometheus exporter detect

Prometheus exporter detector !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus exporter detector.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus exporter detect', 'description': 'Prometheus exporter...

WordPress Securimage-WP 3.2.4 - Cross-Site Scripting Detection

WordPress Securimage-WP 3.2.4 plugin contains a cross-site scripting vulnerability via siwptest.php. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...

BlogEngine.NET 3.3.7.0 - Local File Inclusion Detection

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter !/usr/bin/env python3 -- coding: utf-8 -- """BlogEngine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Jeecg-Boot v3.5.1 - SQL Injection Detection

SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData in jeecg-boot v3.5.1. !/usr/bin/env python3 -- coding: utf-8 -- """SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData in jeecg-boot v3.""" from kittysploit import from...

Qualys Cloud Platform Login Panel - Detect

Qualys Cloud Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualys Cloud Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualys Cloud Platform Login...

u5cms v8.3.5 - Open Redirect Detection

u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. !/usr/bin/env python3 -- coding: utf-8 -- """u5cms version 8.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Google Service Json Detection

google-services.json internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """google-services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Service Json Detection', 'description':...

Advantech R-SeeNet - Cross-Site Scripting Detection

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the deviceid parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Advantech R-SeeNet contains a...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting Detection

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Page-layout-builder v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Hue Magic 3.0.0 - Local File Inclusion Detection

Hue Magic 3.0.0 is susceptible to local file inclusion via the res.sendFile API. !/usr/bin/env python3 -- coding: utf-8 -- """Hue Magic 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hue Magic 3.0.0 -...

LDAP Injection In OpenAM Detection

OpenAM contains an LDAP injection vulnerability. When a user tries to reset his password, they are asked to enter username, and then the backend validates whether the user exists or not through an LDAP query. If the user exists, the password reset token is sent to the user's email. Enumeration ca...

Symantec Encryption Server Login Panel - Detect

Symantec Encryption Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Encryption Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec Encrypti...