Agentejo Cockpit 0.10.2 - Cross-Site Scripting Detection

Agentejo Cockpit 0.10.2 contains a reflected cross-site scripting vulnerability due to insufficient sanitization of the to parameter in the /auth/login route, which allows for injection of arbitrary JavaScript code into a web page's content. !/usr/bin/env python3 -- coding: utf-8 -- """Agentejo...

Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting Detection

Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting Detection

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. !/usr/bin/env python3 -- coding: utf-8 -- """H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.""" from...

PHP Login System 2.0.1 - Cross-Site Scripting Detection

msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL !/usr/bin/env python3 -...

Ruijie RG-EW1200G Router Background - Login Bypass Detection

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure Detection

The SiteGuard WP Plugin plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.7.6. This is due to the plugin not restricting redirects from wp-register.php which may disclose the login page URL. This makes it possible for unauthenticated attacke...

Zitadel - User Registration Bypass Detection

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Loan Management System 1.0 - SQL Injection

Auth bypass SQLi via username on /ajax.php?action=login. !/usr/bin/env python3 -- coding: utf-8 -- """Loan Management System 1.0 - SQL Injection""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Loan...

Cyberoam Firewall - Login Panel Detection

Cyberoam UTM firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberoam UTM firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberoam Firewall - Login Panel...

Cyber Stealer C2 Panel - Detect

Cyber Stealer C2 Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cyber Stealer C2 Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyber Stealer C2 Panel - Detect',...

Dahua Web Service Panel - Detect

A Dahua admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Dahua admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dahua Web Service Panel - Detect',...

Dataiku - Default Login Detection

Dataiku contains a default login vulnerability. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations. This vulnerability may also lead to server-side request forgery and/or remote code execution. !/usr/bin/env python3...

Advanced eMail Solution DEEPMail - Panel Detection

Advanced eMail Solution DEEPMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Advanced eMail Solution DEEPMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

DefectDojo Login Panel - Detect

DefectDojo login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DefectDojo login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DefectDojo Login Panel - Detect', 'description':...

Directum Login Panel - Detect

Directum login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Directum login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Directum Login Panel - Detect', 'description':...

Docebo eLearning Login Panel - Detect

Docebo eLearning login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Docebo eLearning login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docebo eLearning Login Panel - Detect...

Dotclear Admin Login Panel - Detect

Dotclear admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dotclear admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dotclear Admin Login Panel - Detect',...

Dradis Professional Edition Login Panel - Detect

Dradis Professional Edition login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dradis Professional Edition login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dradis...

DragonFly Login - Panel Detection

Dragonfly Login Panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Dragonfly Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DragonFly Login - Panel Detection', 'description...

Dynamicweb Login Panel - Detect

Dynamicweb login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dynamicweb login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dynamicweb Login Panel - Detect', 'description':...