Avada < 7.11.7 - Information Disclosure Detection

The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-content/uploads/fusion-forms/' directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via an Avada created form with ...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection Detection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

Issabel PBX 4.0.0-6 - Directory Listing Detection

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory !/usr/bin/env python3 -- coding: utf-8 -- """An issue in issabel-pbx v.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Axigen WebMail - Cross-Site Scripting Detection

Cross Site Scripting XSS vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions...

MLFlow < 2.8.1 - Sensitive Information Disclosure Detection

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in MLFlow versions 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

WordPress Hummingbird <= 3.18.0 - Sensitive Information Exposure via Log File Detection

Hummingbird Performance WordPress plugin = 3.18.0 contains a sensitive information exposure caused by improper handling in the 'request' function, letting unauthenticated attackers extract sensitive data including Cloudflare API credentials, exploit requires no authentication. !/usr/bin/env pytho...

Kingdee EAS - Local File Inclusion Detection

Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive server information. !/usr/bin/env python3 -- coding: utf-8 -- """Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive s.""" from...

Ecology OA CheckServer - SQL Injection Detection

Ecology OA system improperly filters incoming data from users, resulting in a SQL injection vulnerability. Remote and unauthenticated attackers can use this vulnerability to conduct SQL injection attacks and steal sensitive database information. !/usr/bin/env python3 -- coding: utf-8 -- """Ecolog...

WordPress Plugin Email Subscribers Listing Detection

Searches for sensitive directories present in the email-subscribers plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the email-subscribers plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Typo3 composer.json Exposure Detection

The web application is based on Typo3 CMS. A sensitive file has been found. Access to such files must be restricted, as it may lead to disclosure of sensitive information about the web application. !/usr/bin/env python3 -- coding: utf-8 -- """The web application is based on Typo3 CMS.""" from...

UEditor - Arbitrary File Upload Detection

UEditor contains an arbitrary file upload vulnerability. An attacker can upload arbitrary files to the server, which in turn can be used to make the application execute file content as code, As a result, an attacker can possibly obtain sensitive information, modify data, and/or execute unauthoriz...

default-wamp-server-page Detection

Wamp default page will expose sensitive configuration and vhosts. !/usr/bin/env python3 -- coding: utf-8 -- """Wamp default page will expose sensitive configuration and vhosts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SpiderControl SCADA Web Server - Sensitive Information Exposure Detection

SpiderControl SCADA Web Server is vulnerable to sensitive information exposure. Numerous, market-leading OEM manufacturers - from a wide variety of industries - rely on SpiderControl. !/usr/bin/env python3 -- coding: utf-8 -- """SpiderControl SCADA Web Server is vulnerable to sensitive informatio...

WordPress Duplicator Plugin - Information disclosure Detection

Unauthenticated Information disclosure of Duplicator WordPress plugin sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated Information disclosure of Duplicator WordPress plugin sensitive files.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

WordPress Ad Widget 2.11.0 - Local File Inclusion Detection

WordPress Ad Widget 2.11.0 is vulnerable to local file inclusion. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Ad Widget 2.""" import re from kittysploit import from...

OpenNMS Dashboard - Exposure Detection

OpenNMS Dashboard exposure was detected. OpenNMS is an enterprise-grade network monitoring platform. Exposed dashboards may reveal sensitive network infrastructure information, monitoring data, alarms, and potentially allow unauthorized access. !/usr/bin/env python3 -- coding: utf-8 -- """OpenNMS...

openSIS 5.1 - Local File Inclusion Detection

openSIS 5.1 is vulnerable to local file inclusion and allows attackers to obtain potentially sensitive information by executing arbitrary local scripts in the context of the web server process. This may allow the attacker to compromise the application and computer; other attacks are also possible...

Otobo - Open Redirect Detection

Otobo contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Otobo contains an open redirect vulnerability.""" import ...

LearnDash LMS < 4.10.2 - Sensitive Information Exposure Detection

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes. !/usr/bin/env python3 -- coding: utf-8 -- """The LearnDash LMS plugin for...

Zenphoto Installation Sensitive Information Detection

Misconfiguration on Zenphoto version 1.5.X which lead to sensitive information disclosure !/usr/bin/env python3 -- coding: utf-8 -- """Misconfiguration on Zenphoto version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...