Bank Locker Management System v1.0 - SQL Injection Detection

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. !/usr/bin/env python3 --...

ForgeRock IG Login/Welcome Page - Detect

Detects ForgeRock Identity Gateway login or welcome page and extracts version number !/usr/bin/env python3 -- coding: utf-8 -- """Detects ForgeRock Identity Gateway login or welcome page and extracts version number.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress WPS Hide Login - Error Log Disclosure Detection

Detected whether the WPS Hide Login plugin’s /classes/ directory was exposed with directory listing enabled due to server misconfiguration, potentially disclosing PHP error logs or source code. !/usr/bin/env python3 -- coding: utf-8 -- """Detected whether the WPS Hide Login plugin’s /classes/...

Kyan Credential - Exposure Detection

Kyan Network login panel was detected. Password and other credential theft is possible via accessing this panel. !/usr/bin/env python3 -- coding: utf-8 -- """Kyan Network login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SafeNet Authentication Login Panel - Detect

SafeNet Authentication Service Self Enrollment login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SafeNet Authentication Service Self Enrollment login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NetScaler Console - Panel Detection

NetScaler Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NetScaler Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetScaler Console - Panel...

FLR Blocks <= 1.0.7 - Privilege Escalation

Unauthenticated attackers can change the administrator email via flrblocksusersettingsupdatehandle AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Frontend Login and Registration Blocks - Privilege Escalation""" import secrets from kittysploit import from...

Cockpit Project Login Panel - Detect

Cockpit Project products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cockpit Project products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cockpit Project Login Panel - Detect',...

Codian MCU Login Panel - Detect

Codian MCU login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Codian MCU login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Codian MCU Login Panel - Detect', 'description':...

ColdFusion Administrator Login Panel - Detect

ColdFusion Administrator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ColdFusion Administrator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ColdFusion...

Content Central Login Panel - Detect

Content Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Content Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Content Central Login Panel - Detect',...

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass Detection

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

Zoo Management System 1.0 - SQL Injection Detection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env...

Darktrace Threat Visualizer Login Panel - Detect

Darktrace Threat Visualizer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Darktrace Threat Visualizer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Darktrace Threa...

Datadog Login Panel - Detect

Datadog login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Datadog login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Datadog Login Panel - Detect', 'description': 'Datadog...

Dataease - Login Panel Detection

Dataease Login Panel is discovered !/usr/bin/env python3 -- coding: utf-8 -- """Dataease Login Panel is discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dataease - Login Panel Detection', 'description':...

Shopware < 5.5.8 - Cross-Site Scripting Detection

Shopware before 5.5.8 contains a reflected cross-site scripting XSS caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim...

St. Joe ERP system - SQL Injection Detection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

DaybydayCRM Login Panel - Detect

DaybydayCRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DaybydayCRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DaybydayCRM Login Panel - Detect', 'description...

Dell OpenManage Switch Administrator Login Panel - Detect

Dell OpenManage Switch Administrator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell OpenManage Switch Administrator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...