WordPress Pie Register < 3.7.2.4 - Open Redirect Detection

WordPress Pie Register 3.7.2.4 is susceptible to an open redirect vulnerability because the plugin passes unvalidated user input to the wpredirect function. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Pie Register 3.""" import re from kittysploit import from lib.protocols.http.httpclie...

Netsweeper 4.0.9 - Open Redirect Detection

Netsweeper 4.0.9 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Netsweeper 4.""" import re from kittysploit...

Reflected Odoo - Open Redirect Detection

Detected an open redirect vulnerability in Odoo where the redirect parameter in web/login was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Odoo where the...

Open Game Panel Login Panel - Detect

Open Game Panel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Open Game Panel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Game Panel Login Panel - Detect',...

Open Web Analytics Login - Detect

Detects the presence of Open Web Analytics login page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Open Web Analytics login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Open Web...

Open Web Analytics Installer - Exposure Detection

Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient impo...

Mosparo < 1.0.2 - Open Redirect Detection

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in GitHub repository mosparo/mosparo prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Toolbar <= 2.2.6 - Open Redirect Detection

The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin redirects to any...

Travelpayouts <= 1.1.16 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env python...

WPMobile.App <= 11.56 - Open Redirect Detection

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

PrivateGPT < 0.5.0 - Open Redirect Detection

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. !/usr/bin/env python3 -- codin...

IceWarp Mail Server ≤11.4.0 - Open Redirect Detection

IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows attackers to redirect users to arbitrary external domains through malicious URLs. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server version 11.""" import re from kittysploit import from...

Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect Detection

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requestedpage' POST parameter in the verifyusernamepassword function. This makes it possible for unauthenticated...

Mastodon - Open Redirect Detection

Mastodon version 4.5.8, 4.4.15, 4.3.21 is vulnerable to unauthenticated Open Redirect vulnerability CWE-601 exists in the /web/ route due to improper handling of URL-encoded path segments. !/usr/bin/env python3 -- coding: utf-8 -- """Mastodon version 4.""" import re from kittysploit import from...

Hoppscotch <= 2026.2.1 - Open Redirect Detection

Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...

Open WebUI < 0.9.5 - Information Disclosure Detection

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-...

GnuBoard5 5.5.16 - Open Redirect Detection

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard5 5.""" import re...

XWiki WYSIWYG API - Open Redirect Detection

A vulnerability in XWiki's WYSIWYG API allows an attacker to redirect users to arbitrary external URLs through the xerror parameter. This could be used in phishing attacks to redirect users to malicious websites. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's WYSIWYG API...

Astro SSR - Open Redirect Detection

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. !/usr/bin/env python3...

DedeCMS - Open Redirect Detection

DedeCMS contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS contains an open redirect vulnerability.""" fro...