Ligolo-ng Panel - Detect

Ligolo-ng panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ligolo-ng panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ligolo-ng Panel - Detect', 'description': 'Ligolo-ng panel was...

SugarCRM Login Panel - Detect

SugarCRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SugarCRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SugarCRM Login Panel - Detect', 'description':...

Magento Admin Login Panel - Detect

Magento admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Magento admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magento Admin Login Panel - Detect',...

Tiki Wiki CMS Groupware Login Panel - Detect

Tiki Wiki CMS Groupware login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tiki Wiki CMS Groupware login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiki Wiki CMS Groupware...

Netsparker Login Panel - Detect

Netsparker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netsparker Login Panel - Detect', 'description':...

Kanboard Login Panel - Detect

Kanboard login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kanboard login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kanboard Login Panel - Detect', 'description':...

Jorani Login Panel - Detect

Jorani login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jorani login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jorani Login Panel - Detect', 'description': 'Jorani logi...

Supertokens Login Panel - Detect

A Supertokens login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Supertokens login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Supertokens Login Panel - Detect',...

Office Web Apps Server Panel - Detect

Microsoft Office Web App Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Office Web App Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Office Web Apps...

Qualitor ITSM - Detect

Qualitor ITSM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualitor ITSM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualitor ITSM - Detect', 'description':...

Cisco IOS XE - Detect

Cisco IOS XE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco IOS XE login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco IOS XE - Detect', 'description': 'Cisco...

Klog Server Panel - Detect

Klog Server panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Klog Server panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Klog Server Panel - Detect', 'description': 'Klog Serve...

CVE-2026-14328

The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wpajaxposgetoption AJAX handler, which verifies only a nonce that is...

CVE-2026-14328

The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wpajaxposgetoption AJAX handler, which verifies only a nonce that is...

CVE-2026-14328 Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpoint

The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wpajaxposgetoption AJAX handler, which verifies only a nonce that is...

CVE-2026-14328

The CVE-2026-14328 entry describes a Privilege Escalation in the Eazy Plugin Manager for WordPress (up to version 4.4.1). The root cause is insufficient authorization on the wp_ajax_pos_get_option AJAX handler, which returns arbitrary WordPress options via get_option() after only a localized nonc...

CVE-2026-14328 Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpoint

The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wpajaxposgetoption AJAX handler, which verifies only a nonce that is...

CVE-2026-14171

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-14171 ads-tec Industrial IT: Post-login open redirect in the web interface

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

EUVD-2026-49731

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...