Mastodon - Open Redirect Detection

Mastodon version 4.5.8, 4.4.15, 4.3.21 is vulnerable to unauthenticated Open Redirect vulnerability CWE-601 exists in the /web/ route due to improper handling of URL-encoded path segments. !/usr/bin/env python3 -- coding: utf-8 -- """Mastodon version 4.""" import re from kittysploit import from...

DedeCMS - Open Redirect Detection

DedeCMS contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS contains an open redirect vulnerability.""" fro...

URL Shortify <= 1.12.1 - Open Redirect Detection

The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirectto' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentiall...

Accept Donations with PayPal <= 1.5.2 - Open Redirect Detection

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.5.2. This is due to insufficient validation on the redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially...

JumpServer - Open Redirect via Referer Header Detection

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. !/usr/bin/env...

Gradio - Open Redirect Detection

Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. !/usr/bin/env python3 -- coding: utf-8 -- """Gradio allows an open redirect bypass via URL encoding, enabling...

XWiki WYSIWYG API - Open Redirect Detection

A vulnerability in XWiki's WYSIWYG API allows an attacker to redirect users to arbitrary external URLs through the xerror parameter. This could be used in phishing attacks to redirect users to malicious websites. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's WYSIWYG API...

WPMobile.App <= 11.56 - Open Redirect Detection

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

open-mjpg-streamer Detection

Open mjpg-streamer service sharing webcam/camera feed !/usr/bin/env python3 -- coding: utf-8 -- """Open mjpg-streamer service sharing webcam/camera feed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Apache Tomcat - Open Redirect Detection

Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Tomcat versions prior to 9.""" import re from kittysploit import from...

WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect Detection

WordPress Newsletter Manager 1.5 is susceptible to an open redirect vulnerability. The plugin used base64 encoded user input in the appurl parameter without validation to redirect users using the header PHP function, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 --...

Gradio - Open Redirect Detection

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

LimeSurvey - Open Redirect via editorLink Detection

LimeSurvey before 6.16.11 contains an open redirect vulnerability in the editorLink route. An attacker can craft a URL that redirects users to an arbitrary external site, potentially enabling phishing attacks. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 6.""" import re from...

Uncanny Toolkit for LearnDash - Open Redirection Detection

A vulnerability in the WordPress Uncanny Toolkit for LearnDash Plugin allowed malicious actors to redirect users, posing a potential risk of phishing incidents. The issue has been resolved in version 3.6.4.4, and users are urged to update for security. !/usr/bin/env python3 -- coding: utf-8 -- ""...

Apache Struts - Multiple Open Redirection Vulnerabilities Detection

Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly ."...

Netsweeper 3.0.6 - Open Redirection Detection

An open redirect vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in...

Caddy 2.4.6 - Open Redirect Detection

Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Caddy 2.""" import re from...

Thinkific - Open Redirect Detection

Thinkific contains an open redirect vulnerability via the http://interact.sh URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Thinkific contains an...

JIRA in HTTPS mode - Open Redirect Detection

Detected Open redirect vulnerability in Jira via osdestination parameter versions 5.2.11, 6.2, and 6.2.2. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Open redirect vulnerability in Jira via osdestination parameter versions 5.""" import re from kittysploit import from...

openarchives - Detection

Detects Open Archives Initiative instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Open Archives Initiative instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'openarchives - Detection',...