Wanhu OA smartUpload.jsp - Arbitrary File Upload Detection

Wanhu OA smartUpload.jsp file has a file upload interface and does not filter file types, resulting in arbitrary file upload vulnerabilities. Malicious JSP files can be uploaded directly. !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA smartUpload.""" from kittysploit import from...

Wanhu OA OfficeServerServlet - Arbitrary File Upload Detection

Wanhu OA officeserverservlet file upload vulnerability !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA officeserverservlet file upload vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wanhu OA...

Zhiyuan OA Arbitrary File Upload Vulnerability Detection

A vulnerability in Zhiyuan OA allows remote unauthenticated attackers to upload arbitrary files to the remote server and cause execute arbitrary code to be executed. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Zhiyuan OA allows remote unauthenticated attackers to upload...

Yonyou UFIDA NC - Information Exposure Detection

After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly. !/usr/bin/env python3 -- coding: utf-8 -- """After logging in and visiting the address where the...

UEditor - Arbitrary File Upload Detection

UEditor contains an arbitrary file upload vulnerability. An attacker can upload arbitrary files to the server, which in turn can be used to make the application execute file content as code, As a result, an attacker can possibly obtain sensitive information, modify data, and/or execute unauthoriz...

Unauthenticated Popup File Upload - Detect

Endpoints where files can be uploaded without authentication were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Endpoints where files can be uploaded without authentication were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

CKFinder - Unauthenticated Exposure Detection

The CKFinder file manager was found to be exposed without authentication, allowing unauthenticated users to directly access its web interface. Due to this misconfiguration, attackers were able to browse server directories, upload arbitrary files, and manage existing files. !/usr/bin/env python3 -...

McAfee ePolicy Orchestrator - Arbitrary File Upload Detection

McAfee ePolicy Orchestrator ePO is vulnerable to a ZipSlip vulnerability which allows arbitrary file upload when archives are unpacked if the names of the packed files are not properly sanitized. An attacker can create archives with files containing "../" in their names, making it possible to...

Luftguitar CMS Arbitrary File Upload Detection

A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote service via the 'ftb.imagegallery.aspx' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote...

IoTaWatt Configuration App Exposure Detection

An IoTaWatt configuration app was discovered. Unauthenticated access to an IoTaWatt energy monitor could give a malicious attacker the means to upload to any of several third-party energy websites/database. !/usr/bin/env python3 -- coding: utf-8 -- """An IoTaWatt configuration app was...

Kavita - Local File Inclusion Detection

Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename parameter of the /api/image/cover-upload. !/usr/bin/env python3 -- coding: utf-8 -- """Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename...

KCFinder - Exposure Detection

Detected publicly accessible KCFinder instances that may have allowed arbitrary file uploads and remote code execution RCE.Exposure of KCFinder could have allowed an attacker to gain unauthorized access to the file manager and upload malicious files. !/usr/bin/env python3 -- coding: utf-8 --...

Jolokia <= 1.7.1 Information Leakage Detection

Tomcat's credential disclosure leading to Remote Code Execution via WAR upload. !/usr/bin/env python3 -- coding: utf-8 -- """Tomcat's credential disclosure leading to Remote Code Execution via WAR upload.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Zimbra Collaboration - Unrestricted File Upload Detection

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload Detection

WordPress Fancy Product Designer plugin before 4.6.9 is susceptible to an arbitrary file upload. An attacker can upload malicious files and execute code on the server, modify data, and/or gain full control over a compromised system without authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Adning Advertising <= 1.5.5 - Arbitrary File Upload Detection

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

Cisco HyperFlex HX Data Platform - Arbitrary File Upload Detection

Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user. !/usr/bin/env...

Cherry Plugin < 1.2.7 - Arbitrary File Retrieval and File Upload Detection

WordPress plugin Cherry 1.2.7 contains an unauthenticated file upload and download vulnerability, allowing attackers to upload and download arbitrary files. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file. !/usr/bin/env python3 -- coding: utf-8...

WordPress Cherry < 1.2.7 - Unauthenticated Arbitrary File Upload and Download Detection

WordPress plugin Cherry 1.2.7 has a vulnerability which enables an attacker to upload files directly to the server. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Cherry 1.""" from...

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory Detection

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PrestaShop versions after 1.""" from kittysploit import from...