PT MultiScanner Web Console Code Execution

The vulnerability in the web console of the PT MultiScanner anti-virus system, the PT Sandbox network sandbox, the multi-level corporate email protection systems PT Email Security, and PT Email Gateway are related to the lack of protective measures for the website structure. Exploiting this...

Ruby on Rails Web Console - IP Bypass RCE (CVE-2015-3224)

Exploits CVE-2015-3224 by bypassing Web Console IP restrictions with X-Forwarded-For: 0000::1 and evaluating backtick OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224 — opens execute...

Ruby on Rails Web Console - IP Bypass RCE Detection (CVE-2015-3224)

Detects CVE-2015-3224 by requesting a random path with X-Forwarded-For: 0000::1, extracting the web-console mount/session, then PUTting a backtick command. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224.""" import re from urllib.parse...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351877...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-61487 Source advisory: MEND:CVE-2026-61487...

NPort Web Console Login Panel - Detect

NPort Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NPort Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NPort Web Console Login Panel -...

Nutanix Web Console Login Panel - Detect

Nutanix Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nutanix Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nutanix Web Console Login Panel...

i-Panel Administration System 2.0 - Cross-Site Scripting Detection

i-Panel Administration System 2.0 contains a cross-site scripting vulnerability that enables an attacker to execute arbitrary JavaScript code in the browser-based web console. !/usr/bin/env python3 -- coding: utf-8 -- """i-Panel Administration System 2.""" from kittysploit import from...

IBM MQ Web Console Login Panel - Detect

IBM MQ Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM MQ Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM MQ Web Console Login Panel -...

OpenNMS Web Console Login Panel - Detect

OpenNMS Web Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenNMS Web Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenNMS Web Console Login Panel...

OpenBao Web UI Panel - Detect

Detects the presence of the OpenBao web console. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the OpenBao web console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenBao Web UI Panel -...

Alibaba Arthas Web Console - Detect

Detected Alibaba Arthas web console interface was detected. Arthas is a Java diagnostic tool that can expose a web-based console when enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Alibaba Arthas web console interface was detected.""" from kittysploit import from...

VIVOTEK Web Console Detect

Detects VIVOTEK Web Console Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects VIVOTEK Web Console Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VIVOTEK Web Console Detect', 'description': 'Detect...

EUVD-2021-34855

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...

CVE-2021-32084

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-42253, CVE-2026-42588, CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270 reported for activemq-all-5.19.0.jar Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input...

CVE-2021-32084

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...

PT-2026-65306

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Deployment Appliance SMA version 11.0.273 Description An issue exists where API endpoints are not subject to the same IP address or subnet restrictions applied to the web console. If an attacker possesses valid credentials o...

CVE-2021-32084

The Quest KACE Systems Deployment Appliance (SMA) 11.0.273 is vulnerable to an improper access control issue where API endpoints are not restricted even if the web console is limited by IP address or subnets. If an attacker obtains valid credentials or API keys , they can bypass these network res...