IMO - Arbitrary File Download Detection

The imo cloud office can read system sensitive files because the filename parameter of the /file/Placard/upload/ImoDownLoadUI.php page is not strictly filtered. !/usr/bin/env python3 -- coding: utf-8 -- """The imo cloud office can read system sensitive files because the filename parameter of the...

Microsoft FrontPage Configuration - Exposure Detection

Microsoft FrontPage Server Extensions configuration files were accessible, exposing version details, directory paths, and other configurations. This was a common misconfiguration on old 2000s IIS servers with FrontPage Server Extensions installed. !/usr/bin/env python3 -- coding: utf-8 --...

M-Files Web Login Panel - Detect

M-Files Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """M-Files Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'M-Files Web Login Panel - Detect',...

Office Suite Premium < 10.9.1.42602 - Cross-Site Scripting Detection

Office Suite is suffering from an XSS vulnerability in the following parameter /api?path=files&id. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it. !/usr/bin/env python3 -- coding: utf-8 -- """Office Suite is suffering from an XSS...

Pantheon upstream.yml Disclosure Detection

Public Pantheon YAML Configuration Files might include sensitive info !/usr/bin/env python3 -- coding: utf-8 -- """Public Pantheon YAML Configuration Files might include sensitive info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

Portainer - Init Deploy Discovery Detection

Portainer initialization deployment files were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Portainer initialization deployment files were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Devika v1 - Path Traversal Detection

The snapshotpath parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshotpath parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized...

Vite server.fs.deny Bypass - Local File Inclusion Detection

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest- script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than...

Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download Detection

Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/downloadworkdirfile.py, letting attackers access unauthorized files, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """Agent-Zero v0.""" import re from kittysploit import from...

db.xml File - Detect

db.xml file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """db.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'db.xml File - Detect', 'description': 'db.xml file was detected.', 'author': 'KittySploit...

Sonatype Nexus Repository Manager 3 - Local File Inclusion Detection

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. !/usr/bin/env python3 -- coding: utf-8 -- """Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files.""" import re from...

MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal Detection

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

WP-CLI Yaml File Exposure Detection

Detects WP-CLI Yaml File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WP-CLI Yaml File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WP-CLI Yaml File Exposure Detection', 'description':...

WordPress WP Fastest Cache Plugin - Full Path Disclosure Detection

WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected PHP files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin WP Fastest Cache internal file system path was disclosed through direct access to unprotected.""" from kittysploi...

WordPress OceanWP - Full Path Disclosure Detection

WordPress OceanWP theme is vulnerable to full path disclosure via direct access to theme files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress OceanWP theme is vulnerable to full path disclosure via direct access to theme files.""" from kittysploit import from lib.protocols.http.httpclien...

WordPress SEO Plugin Rank Math - Full Path Disclosure Detection

WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Rank Math SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress WP Mail SMTP - Full Path Disclosure Detection

WordPress WP Mail SMTP plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress WP Mail SMTP plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

Generic PHP Backup Information Disclosure Detection

Generic php file source code was detected via backup files. !/usr/bin/env python3 -- coding: utf-8 -- """Generic php file source code was detected via backup files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Twonky Server 8.5.2 on Linux and Windows - Log File Exposure Detection

Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Twonky Server 8."...

ACTi-Video Monitoring - Local File Inclusion Detection

ACTI video surveillance has loopholes in reading any files !/usr/bin/env python3 -- coding: utf-8 -- """ACTI video surveillance has loopholes in reading any files.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...