IMO - Arbitrary File Download Detection

The imo cloud office can read system sensitive files because the filename parameter of the /file/Placard/upload/ImoDownLoadUI.php page is not strictly filtered. !/usr/bin/env python3 -- coding: utf-8 -- """The imo cloud office can read system sensitive files because the filename parameter of the...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Google Api Private Key Detection

Google API private keys are exposed in files. !/usr/bin/env python3 -- coding: utf-8 -- """Google API private keys are exposed in files.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Api Private Key...

Google Cloud Access Token Detection

Internal Google Cloud access tokens are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Internal Google Cloud access tokens are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Access Token...

Generic PHP Backup Information Disclosure Detection

Generic php file source code was detected via backup files. !/usr/bin/env python3 -- coding: utf-8 -- """Generic php file source code was detected via backup files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

GeoServer - XML External Entity Injection Detection

GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity XXE injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input. !/usr/bin/env python3 -- coding: utf-8 --...

esm.sh <= v136 - Local File Inclusion Detection

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """esm.""" import re from kittysploit import from...

SolarView Compact < 6.00 - Directory Traversal Detection

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Detection

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 is susceptible to local file inclusion because of insecure handling of a download function that leads to disclosure of internal files due to path traversal with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Franklin...

db.xml File - Detect

db.xml file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """db.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'db.xml File - Detect', 'description': 'db.xml file was detected.', 'author': 'KittySploit...

Discover db schema files Detection

This file is auto-generated from the current state of the database. !/usr/bin/env python3 -- coding: utf-8 -- """This file is auto-generated from the current state of the database.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

DedeCMS 5.7.87 - Directory Traversal Detection

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal Detection

A directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

Joomla! Component JotLoader 2.2.1 - Local File Inclusion Detection

A directory traversal vulnerability in the JotLoader comjotloader component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in th...

Joomla! Component SMEStorage - Local File Inclusion Detection

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component News Portal 1.5.x - Local File Inclusion Detection

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in t...

OpenEMR 4.1 - Local File Inclusion Detection

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the formname parameter to 1 contrib/acog/printform.php; or 2 loadform.php, 3 viewform.php, or 4 trendform.php in interface/patientfile/encounter. !/usr/bin/en...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal Detection

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 !/usr/bin/env python3 -- coding:...

MySQLDumper 1.24.4 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...