OPNsense <=20.1.5 - Open Redirect Detection

OPNsense through 20.1.5 contains an open redirect vulnerability via the url redirect parameter in the login page, which is not filtered. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/en...

Eventum <3.4.0 - Open Redirect Detection

Eventum before 3.4.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Eventum before 3.""" import re from...

BentoML v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 ...

RStudio Connect - Open Redirect Detection

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites. !/usr/bin/env python3 -- coding: utf-8 -- """RStudio Connect prior to 2023.""" import re from kittysploit import from...

EyouCMS 1.5.4 Open Redirect Detection

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect Detection

WordPress Page Builder KingComposer 2.9.6 and prior does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action which is available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Page Builder...

Keystone 6 Login Page - Open Redirect and Cross-Site Scripting Detection

On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS. !/usr/bin/env python3 -- coding: utf-8 -- """On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalat.""" from...

IceWarp Mail Server - Open Redirect Detection

IceWarp Mail Server contains an open redirect via the referer parameter. This can lead to phishing attacks or other unintended redirects. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server contains an open redirect via the referer parameter.""" import re from kittysploit import from...

Nova noVNC - Open Redirect Detection

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Nova noVNC contains an open redirect vulnerability."...

Microweber < 1.2.11 - Open Redirection Detection

Open Redirect in Packagist microweber/microweber prior to 1.2.11. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in Packagist microweber/microweber prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting Detection

PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. !/usr/bin/env python3 -- coding: utf-8 -- """PKP Open Journal Systems 2.""" from kittysploit import from...

PlaceOS 1.2109.1 - Open Redirection Detection

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. !/usr/bin/env python3 -- coding: utf-8 -- """PlaceOS Authentication Service before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...

Odoo <= 8.0-20160726 & 9.0 - Open Redirect Detection

An Open Redirect vulnerability in Odoo versions = 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """An Open Redirect vulnerability in Odoo versions = 8.""" import re from kittysploit import from...

Fortinet FortiOS - Open Redirect/Cross-Site Scripting Detection

FortiOS Web User Interface in 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting attacks via the "redirect" parameter to "login." !/usr/bin/env python3 -- coding: utf...

Optergy Proton/Enterprise Building Management System - Open Redirect Detection

Optergy Proton/Enterprise Building Management System contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Optergy...

Babel - Open Redirect Detection

Babel contains an open redirect vulnerability via redirect.php in the newurl parameter. An attacker can use any legitimate site using Babel to redirect user to a malicious site, thus possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations. !/usr/bin/env...

DotCMS < 5.0.2 - Open Redirect Detection

dotCMS before 5.0.2 contains multiple open redirect vulnerabilities via the html/common/forwardjs.jsp FORWARDURL parameter or the html/portlet/ext/common/pagepreviewpopup.jsp hostname parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect Detection

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. !/usr/bin/env python3 -- coding: utf-8 -- """Polarisft Intellect Core Banking Software Version 9.""" import re from...