Prime Mover < 1.9.3 - Sensitive Data Exposure Detection

Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the 'prime-mover-export-files/1/' folder. This makes it possible for unauthenticated attackers to extract sensitive data including site and...

WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion Detection

Campress theme for WordPress up to 1.35 contains a local file inclusion caused by 'campresswoocommercegetajaxproducts' function, letting unauthenticated attackers include and execute arbitrary PHP files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Campress the...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal Detection

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

Discover db schema files Detection

This file is auto-generated from the current state of the database. !/usr/bin/env python3 -- coding: utf-8 -- """This file is auto-generated from the current state of the database.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Dicoogle PACS 2.5.0 - Local File Inclusion Detection

Dicoogle PACS 2.5.0 is vulnerable to local file inclusion. This allows an attacker to read arbitrary files that the web user has access to. Admin credentials aren't required. !/usr/bin/env python3 -- coding: utf-8 -- """Dicoogle PACS 2.""" from kittysploit import from lib.protocols.http.httpclien...

SAP NetWeaver Application Server Java 7.5 - Local File Inclusion Detection

SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...

Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal Detection

Schneider Electric Pelco VideoXpert Enterprise versions 2.0 and prior contain a directory traversal caused by insufficient input validation, letting unauthorized persons view web server files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Schneider Electric Pelc...

Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion Detection

Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel...

PHP Proxy 3.0.3 - Local File Inclusion Detection

PHP Proxy 3.0.3 is susceptible to local file inclusion vulnerabilities that allow unauthenticated users to read files from the server via index.php?q=file:/// a different vulnerability than CVE-2018-19246. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Proxy 3.""" import re from kittysploit...

Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass Detection

Trend Micro Threat Discovery Appliance 2.6.1062r1 is vulnerable to a directory traversal vulnerability when processing a sessionid cookie, which allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS. !/usr/bin/env...

D-Link Routers - Local File Inclusion Detection

D-Link routers DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02,DWR-512 through 2.02,DWR-712 through 2.02,DWR-912 through 2.02, DWR-921 through 2.02, DWR-111 through 1.01, and probably others with the same type of firmware allows remote attackers to read arbitrary files via a /...

Tyto Sahi pro 7.x/8.x - Local File Inclusion Detection

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Tyto Sahi Pro versions through 7.""" from...

Wordpress Brandfolder - Remote/Local File Inclusion Detection

WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote server and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote...

Build Properties File Exposure Detection

Detects Build Properties File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Build Properties File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Build Properties File Exposure Detection',...

Cargo Lock Packages Disclosure Detection

Detects Cargo Lock Packages Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cargo Lock Packages Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cargo Lock Packages Disclosure Detection',...

WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion Detection

WordPress Nevma Adaptive Images plugin before 0.6.67 allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Nevma Adaptive Images plugin before 0."""...

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion Detection

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """In avataruploader v7.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclie...

mTheme Unus < 2.3 - Directory Traversal Detection

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. !/usr/bin/env python3 -- coding: utf-8 -- """The mTheme-Unus theme for...

SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion Detection

SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. dot dot in the path parameter to /Catalog, aka SAP Security Note 2230978. !/usr/bin/env python3 -- coding: utf-8...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...