Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access Detection

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. !/usr/bin/env python3 -- coding: utf-8 -- """Tieline IP Audio Gateway 2."...

Powertek Firmware <3.30.30 - Authorization Bypass Detection

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

CopyParty v1.8.6 - Cross Site Scripting Detection

Copyparty is a portable file server. Versions prior to 1.8.6 are subject to a reflected cross-site scripting XSS Attack.Vulnerability that exists in the web interface of the application could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure Detection

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

TOTOLINK/Realtek Routers - Information Disclosure Detection

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

N-able N-central < 2024.2 - Authentication Bypass Detection

N-central server versions prior to 2024.2 contain an authentication bypass in the user interface, letting attackers access restricted areas without proper credentials, exploit requires no specific conditions. !/usr/bin/env python3 -- coding: utf-8 -- """N-central server versions prior to 2024."""...

OfficeWeb365 Indexs Interface - Arbitrary File Read Detection

There is any file reading in the officeWeb365 Indexs interface. !/usr/bin/env python3 -- coding: utf-8 -- """There is any file reading in the officeWeb365 Indexs interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

TP-Link Archer A20 v3 Router - Cross-site Scripting Detection

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

Digi International Router - Login Panel Detection

Digi International cellular routers expose a web management interface used in industrial IoT and remote connectivity applications. !/usr/bin/env python3 -- coding: utf-8 -- """Digi International cellular routers expose a web management interface used in industrial IoT and remote connec.""" from...

Pi-hole Reflected XSS in 404-Error Page Detection

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. !/usr/bin/env python3 --...

Echelon i.LON SmartServer - Login Panel Detection

Echelon now Adesto/Dialog Semiconductor i.LON SmartServer is a LonWorks/IP-852 building automation controller used in HVAC, lighting, and energy management systems. The embedded web interface is frequently exposed on standard and non-standard ports. !/usr/bin/env python3 -- coding: utf-8 --...

HP LaserJet Configuration Exposure Detection

HP LaserJet printer web interface exposes sensitive configuration information without authentication.This includes device information, network configuration, SNMP settings, and other sensitive data that could be leveraged for further attacks or network reconnaissance. !/usr/bin/env python3 --...

JustBoil.me Images Plugin - Exposed Image Upload Detection

JustBoil.me Images Plugin for TinyMCE contains an exposed dialog interface that could lead to potential security vulnerabilities. The plugin's dialog-v4.htm file is accessible without proper access controls, which may allow unauthorized access to image upload functionality. !/usr/bin/env python3 ...

KACE Systems Management Appliance - Installer Detection

The exposure of the KACE Systems Management Appliance’s installer interface through the /common/setup.php endpoint allowed unauthorized access to the system setup wizard. This interface was publicly accessible when it should have been restricted, potentially granting attackers the ability to...

Buffalo WSR-2533DHPL2 - Path Traversal Detection

Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Buffalo...

Progress Kemp LoadMaster - Command Injection Detection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated remote attackers can access the system through the LoadMaster management interface, enablin...

AnythingLLM Panel Detection

Detects AnythingLLM personal LLM web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AnythingLLM panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AnythingLLM Panel Detection", "description":...

Adiscon LogAnalyzer - Information Disclosure Detection

Adiscon LogAnalyzer was discovered. Adiscon LogAnalyzer is a web interface to syslog and other network event data. It provides easy browsing and analysis of real-time network events and reporting services. !/usr/bin/env python3 -- coding: utf-8 -- """Adiscon LogAnalyzer was discovered.""" from...

Aruba VIA VPN - Login Panel Detection

Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution. The web management portal exposes a login interface typically on port 4343. !/usr/bin/env python3 -- coding: utf-8 -- """Aruba VIA Virtual Intranet Access is HPE Aruba's SSL VPN client and gateway solution."""...

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...