Go.mod Disclosure Detection

go.mod internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go.mod Disclosure Detection', 'description': 'go.mod internal file is exposed.',...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Kyocera Printer d-COPIA253MF - Directory Traversal Detection

Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversal vulnerability which could allow an attacker to retrieve or view arbitrary files from the affected server. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Printer d-COPIA253MF plus is susceptible to a directory traversa...

Grafana v8.x - Arbitrary File Read Detection

Grafana versions 8.0.0-beta1 through 8.3.0 are vulnerable to a local directory traversal, allowing access to local files. The vulnerable URL path is /public/plugins/NAME/, where NAME is the plugin ID for any installed plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Grafana versions 8."""...

webp_server_go 0.4.0 - Path Traversal Detection

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """webpservergo 0.""" import re from kittysploit...

WordPress Admin Word Count Column 2.2 - Local File Inclusion Detection

The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique. !/usr/bin/env...

openSIS v9.0 - Path Traversal Detection

A path traversal vulnerability exists in openSIS Classic Community Edition v9.0 via the 'filename' parameter in DownloadWindow.php. An unauthenticated remote attacker can exploit this to read arbitrary files on the server by manipulating file paths. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal Detection

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """There is a Directory traversal...

FreeIPA - XML Entity Injection Detection

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. !/usr/bin/env python3 -- coding: utf-8 -- """Access to external...

WAVLINK WN530HG4 - Improper Access Control Detection

Wavlink WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can download log files and configuration data via Exportlogs.sh and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

PrestaShop TshirteCommerce - Directory Traversal Detection

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. !/usr/bin/env python3 -- coding: utf-8 -- """The Custom...

WordPress Visual Form Builder <3.0.8 - Information Disclosure Detection

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. !/usr/bin/env python3 --...

elFinder <=2.1.60 - Local File Inclusion Detection

elFinder through 2.1.60 is affected by local file inclusion via connector.minimal.php. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. !/usr/bin/env python3 -- coding: utf-...

DedeCMS 5.7.87 - Directory Traversal Detection

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Detection

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 is susceptible to local file inclusion because of insecure handling of a download function that leads to disclosure of internal files due to path traversal with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Franklin...

PaperCut < 22.1.3 - Path Traversal Detection

PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables attackers to read, delete, and upload arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """PaperCut NG and PaperCut MF before 22.""" from kittysploit import from lib.protocols.http.httpclient import...

Wavlink - Improper Access Control Detection

Wavlink WL-WN530H4 M30H4.V5030.210121 is susceptible to improper access control in the component /cgi-bin/ExportLogs.sh. An attacker can download configuration data and log files, obtain admin credentials, and potentially execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

Repetier Server - Directory Traversal Detection

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier Server through 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Ghost CMS < 5.42.1 - Path Traversal Detection

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js. !/usr/bin/env python3 -- coding: utf-8 -- """Ghost before 5.""" from kittysploit import...

Chanjet TPlus DownloadProxy.aspx - Arbitrary File Read Detection

Chanjet TPlus DownloadProxy.aspx file has an arbitrary file reading vulnerability. An attacker can obtain sensitive files on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Chanjet TPlus DownloadProxy.""" from kittysploit import from lib.protocols.http.httpclien...