elFinder 2.1.58 - Remote Code Execution Detection

elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. !/usr/bin/env python3 -- coding: utf-8 -- """elFinder 2.""" from...

KindEditor 4.1.11 - Cross-Site Scripting Detection

KindEditor 4.1.11 contains a cross-site scripting vulnerability via the php/demo.php content1 parameter. !/usr/bin/env python3 -- coding: utf-8 -- """KindEditor 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting Detection

WordPress Calendar Event Multi View plugin before 1.4.01 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize or escape the 'start' and 'end' GET parameters before outputting them in the page via php/edit.php. !/usr/bin/env python3 -- coding: utf-8 --...

Better Search Replace < 1.4.5 - PHP Object Injection Detection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

WP User Manager – User Profile Builder & Membership - Local File Inclusion Detection

WP User Manager – User Profile Builder & Membership plugin for WordPress = 2.9.17 contains a local file inclusion caused by improper handling in the profile template scope function, letting unauthenticated attackers execute arbitrary PHP code, exploit requires ability to upload or control PHP...

PHP-Fusion 9.03.50 - Remote Code Execution Detection

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-Fusion 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

WP Hotel Booking < 1.10.4 - PHP Object Injection Detection

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php. !/usr/bin/env python3 -- coding: utf-8 -- """The wp-hotel-booking plugin...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal Detection

A directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

PHP LDAP Admin Panel - Detect

Detects PHP LDAP Admin Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP LDAP Admin Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP LDAP Admin Panel - Detect', 'description'...

PHP-CS-Fixer Cache - File Disclosure Detection

PHP CS fixer cache internal file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP CS fixer cache internal file is disclosed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-CS-Fixer Cache - File...

PHP-FPM Status Detection

Detects PHP-FPM Status. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP-FPM Status.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Status Detection', 'description': 'Detects PHP-FPM Status.',...

PHP Prober - Exposure Detection

PHP Prober Server exposure was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Prober Server exposure was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Prober - Exposure Detection',...

GLPI - Directory Listing and Session Exposure Detection

Detected GLPI directory listing exposed sensitive files and PHP session data, potentially allowing session hijacking or information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected GLPI directory listing exposed sensitive files and PHP session data, potentially allowing session...

PHP Composer Binary - Exposure Detection

This Nuclei template checks if the specified endpoints have publically accessible PHP Composer Binary. !/usr/bin/env python3 -- coding: utf-8 -- """This Nuclei template checks if the specified endpoints have publically accessible PHP Composer Binary.""" from kittysploit import from...

PHP-FPM Configuration Page - Detect

PHP-FPM configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-FPM configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Configuration Page - Detect',...

PHP Fusion Detect

Detects PHP Fusion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Fusion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Fusion Detect', 'description': 'Detects PHP Fusion Detect.',...

PHP Proxy Detect

Detects PHP Proxy Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PHP Proxy Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP Proxy Detect', 'description': 'Detects PHP Proxy Detect.', 'author'...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

WordPress Elementor Page Builder - Full Path Disclosure Detection

WordPress Plugin Elementor Page Builder plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Page Builder plugin files...

elFinder 2.1.58 - Remote Code Execution Detection

elFinder 2.1.58 is vulnerable to remote code execution. This can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. !/usr/bin/env python3 -- coding: utf-8 -- """elFinder 2.""" from kittysploit import from...