LionWiki <3.2.12 - Local File Inclusion Detection

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """LionWiki before 3.""" import re from kittysploit import from...

AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure Detection

AfterLogic Aurora and WebMail Pro products with 7.7.9 and all lower versions are affected by this vulnerability, simply sending an HTTP GET request to WebDAV EndPoint with built-in “caldavpublicuser@localhost” and it’s the predefined password “caldavpublicuser” allows the attacker to read all fil...

BIQS IT Biqs-drive v1.83 Local File Inclusion Detection

A local file inclusion vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user. !/usr/bin/env...

IND780 - Local File Inclusion Detection

IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10' is vulnerable to unauthenticated local file inclusion. It is possible to traverse the folders of the affected host by providing a relative path to the...

Moodle Jmol Filter 6.1 - Local File Inclusion Detection

Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing attackers to read arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle Jmol Filter 6.""" import re from kittysploit import from lib.protocols.http.httpclient import...

XWiki Platform - Path Traversal Detection

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform 4.""" from...

esm.sh <= v136 - Local File Inclusion Detection

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """esm.""" import re from kittysploit import from...

OneUptime < 10.0.21 - Path Traversal Detection

OneUptime 10.0.21 contains a path traversal caused by unsanitized componentName parameter in /workflow/docs/:componentName endpoint, letting unauthenticated attackers read arbitrary files from the server filesystem. !/usr/bin/env python3 -- coding: utf-8 -- """OneUptime 10.""" import re from...

Drupal - Source Code Disclosure Detection

Detected exposed Drupal source code, backup files, and sensitive configurations, potentially disclosing database credentials and API keys. This exposure revealed internal system paths and critical site metadata, increasing the risk of full system compromise. !/usr/bin/env python3 -- coding: utf-8...

Accent Microcomputers LFI Detection

A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrieve password files. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrie.""" import r...

Fortinet FortiOS - Credentials Disclosure Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests due to improper limitation of a...

Gogs <= 0.13.3 - Remote Code Execution Detection

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

WordPress File Manager Plugin - Remote Code Execution Detection

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress File Manager plugin prior to version 6.""" from kittysploit...

Amazon S3 Torrent Download - Detect

Amazon S3 Torrent download was detected, which can allow a malicious user to download files. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon S3 Torrent download was detected, which can allow a malicious user to download files.""" from kittysploit import from lib.protocols.http.httpclient impo...

Service Account Credentials File Disclosure Detection

Service Account Credentials internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Service Account Credentials internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Service Account...

MetInfo <=6.1.0 - Local File Inclusion Detection

MetInfo 6.0.0 through 6.1.0 is vulnerable to local file inclusion and allows remote unauthenticated attackers access to locally stored files and their content. !/usr/bin/env python3 -- coding: utf-8 -- """MetInfo 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Oauth Credentials Json Detection

Oauth Credentials file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Oauth Credentials file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oauth Credentials Json Detection', 'description':...

Hrsale 2.0.0 - Local File Inclusion Detection

Hrsale 2.0.0 is vulnerable to local file inclusion. This exploit allow you to download any readable file from server without permission and login session !/usr/bin/env python3 -- coding: utf-8 -- """Hrsale 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Wordpress Plugin Issuu Panel Remote/Local File Inclusion Detection

The WordPress Issuu Plugin includes an arbitrary file disclosure vulnerability that allows unauthenticated attackers to disclose the content of local and remote files. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Issuu Plugin includes an arbitrary file disclosure vulnerability that...

ICEFlow VPN Disclosure Detection

ICEFlow VPN internal log file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ICEFlow VPN internal log file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ICEFlow VPN Disclosure Detection',...