macOS Server Panel - Detect

Detects macOS Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects macOS Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'macOS Server Panel - Detect', 'description':...

FortiClient Endpoint Management Server Panel - Detect

Detects FortiClient Endpoint Management Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FortiClient Endpoint Management Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Woodwing Studio Server Panel - Detect

Detects Woodwing Studio Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Woodwing Studio Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Woodwing Studio Server Panel ...

Tornado Server Panel - Detect

Tornado server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tornado server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tornado Server Panel - Detect', 'description': 'Torna...

MyQ Print Server Panel - Detect

Detects MyQ Print Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MyQ Print Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyQ Print Server Panel - Detect',...

ajenti competition condition issues/ vulnerabilities

Ajenti is an open-source Linux and BSD-based modular server management panel developed by ajenti. Prior to version 0.112, there was a race condition vulnerability in Ajenti. This vulnerability allowed for bypassing of user authentication within a short period after authentication was performed...

CVE-2026-35175

Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user using the authusers plugin authentication method could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15...

VulnCheck KEV: CVE-2023-39964

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the...

CVE-2026-33746

Convoy is a KVM server management panel for hosting businesses. From version 3.9.0-beta to before version 4.5.1, the JWTService::decode method did not verify the cryptographic signature of JWT tokens. While the method configured a symmetric HMAC-SHA256 signer via lcobucci/jwt, it only validated...

EUVD-2026-8832

Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13...

PT-2026-22120

Name of the Vulnerable Software and Affected Versions Ajenti versions prior to 2.2.13 Description Ajenti is a modular server admin panel for Linux and BSD. Before version 2.2.13, an unauthenticated user could gain access to a server and execute arbitrary code. The issue is resolved in version...

ajenti operating system command injection vulnerability

ajenti is an open-source Linux and BSD-based modular server management panel developed by ajenti. Version 2.1.36 of ajenti contains a vulnerability related to operating system command injection. This vulnerability stems from an authentication bypass, which could allow remote attackers to execute...

CVE-2025-66508

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...

PT-2025-49760

Name of the Vulnerable Software and Affected Versions 1Panel versions 2.0.14 and below Description 1Panel is a web-based control panel for Linux server management. Versions 2.0.14 and below are configured to trust all IP addresses as proxies, allowing attackers to spoof the X-Forwarded-For header...

1Panel Linux Server SQL Injection Unauthorized Access Arbitrary Code

The vulnerability of the 1Panel Linux server’s control panel is related to the lack of measures taken to protect the SQL query structure when processing the orderBy parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information and execute arbitra...

1Panel command injection vulnerability

1Panel is an open source Linux server operations and management panel for the Chinese 1panel community. A command injection vulnerability exists in versions prior to 1Panel v1.10.3-lts. The vulnerability stems from the presence of a command injection issue that can lead to arbitrary file writing...

Redeye - A Tool Intended To Help You Manage Your Data During A Pentest Operation

This project was built by pentesters for pentesters. Redeye is a tool intended to help you manage your data during a pentest operation in the most efficient and organized way. The Developers Daniel Arad - @dandanarad && Elad Pticha - @eladpt Overview The Server panel will display all added server...

1Panel Security Vulnerability

1Panel is an open source Linux server O&M panel for the Chinese 1panel community. A security vulnerability exists in 1Panel version 1.4.3. An attacker can exploit the vulnerability to download arbitrary files through the API interface...

1Panel Security Vulnerability

1Panel is an open source Linux server operations and management panel for the Chinese 1panel community. A security vulnerability exists in 1Panel version 1.4.3, which stems from a lack of parameter filtering...

U.S. Dept Of Defense: Unauthorized Access to Internal Server Panel without Authentication

The server can be accessed without any authentication and it contains information that should not be kept public for anyone. I advice you to take look if this data are sensitive or not! References ███████ Impact There might be sensitive info that should not have to be leaked to public. System Hos...