IceWarp 11.4.6.0 - Cross-Site Scripting Detection

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Linear eMerge E3-Series - Cross-Site Scripting Detection

Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...

System Properties Exposure Detection

System Properties is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """System Properties is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'System Properties Exposure Detection', 'description': 'System...

OpenShift OAuth Proxy - Panel Detect

Detects OpenShift OAuth Proxy login endpoints via oauthproxycsrf or oauthproxy cookie and login page content. Checks both the default port and port 9001. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenShift OAuth Proxy login endpoints via oauthproxycsrf or oauthproxy cookie and login pa...

ILIAS eLearning <7.16 - Open Redirect Detection

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS eLearning before 7.""" import...

WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting Detection

WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress amty-thumb-recent-post plugin 8.""" from kittysploit import from lib.protocols.http.httpclient impo...

Twonky Server - Exposure Detection

Twonky Server is a media server software that allows streaming of multimedia content over DLNA/UPnP protocols. When exposed to the internet or an untrusted network without proper authentication or access restrictions, it may allow unauthorized users to browse and access media files, interact with...

FastCGI Configuration - File Disclosure Detection

FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import fro...

RStudio Sign In Panel - Detect

RStudio Sign In panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RStudio Sign In panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RStudio Sign In Panel - Detect', 'description':...

Nginx Status Page Detection

Detects Nginx Status Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Nginx Status Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Status Page Detection', 'description': 'Detects Nginx Status...

bower.json File Disclosure Detection

Bower is a package manager which stores package information in the bower.json file !/usr/bin/env python3 -- coding: utf-8 -- """Bower is a package manager which stores package information in the bower.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

viewLinc 5.1.2.367 - Carriage Return Line Feed Attack Detection

viewLinc 5.1.2.367 and sometimes 5.1.1.50 allows remote attackers to inject a carriage return line feed CRLF character into the responses returned by the product, which allows attackers to inject arbitrary HTTP headers into the response returned. !/usr/bin/env python3 -- coding: utf-8 --...

ServiceNow UI Macros - Template Injection Detection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

KafDrop - Cross-Site Scripting Detection

KafDrop contains a cross-site scripting vulnerability. It allows remote unauthenticated attackers to inject arbitrary HTML and/or JavaScript into the response returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """KafDrop contains a cross-site scripting vulnerability.""" from...

Joomla! Component ZiMBCore 0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the ZiMB Core aka ZiMBCore or comzimbcore component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Java FTP Proxy Service - Detect

Java FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Java FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Java FTP Proxy...

Hugo Detect

Hugo is a fast and modern static site generator written in Go !/usr/bin/env python3 -- coding: utf-8 -- """Hugo is a fast and modern static site generator written in Go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

BioTime Web Login Panel - Detect

BioTime Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BioTime Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BioTime Web Login Panel - Detect',...

Jupyter Notebook - Remote Command Execution Detection

Jupyter Notebook is an interactive Notebook, computer application is a web based visualization, Jupyter Notebook API/terminals path there are loopholes in the remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter Notebook is an interactive Notebook, computer application i...

Cisco Unified Communications Manager - User Enumeration Detection

Cisco Unified Call Manager is vulnerable to username enumeration. This template enumerates valid usernames and emails from the Cisco UCM UDS API. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Unified Call Manager is vulnerable to username enumeration.""" from kittysploit import from...

Gravity SMTP WordPress Plugin - Sensitive Information Exposure Detection

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. !/usr/bin/env...

NuGet Package.config File Disclosure Detection

Detects NuGet Package.config File Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects NuGet Package.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NuGet Package.config File Disclosure Detection',...

Beszel Unfinished Installation Detection

Detected Beszel server monitoring hub had an unfinished installation with no admin account configured, allowing attackers to create an admin account and gain full control. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Beszel server monitoring hub had an unfinished installation with no adm...

Query hashed password via QueryBuilder Servlet Detection

AEM hased password can be queried via QueryBuilder Servlet. !/usr/bin/env python3 -- coding: utf-8 -- """AEM hased password can be queried via QueryBuilder Servlet.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Que...

Podcast Channels < 0.28 - Cross-Site Scripting Detection

The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting securi.""" from...

YesWiki - Cross-Site Scripting Detection

YesWiki versions 4.5.3 are vulnerable to multiple reflected cross-site scripting XSS vulnerabilities, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki versions 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

TRENDnet TEW-827DRU Login Panel - Detect

TRENDnet TEW-827DRU login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TRENDnet TEW-827DRU login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TRENDnet TEW-827DRU Login Panel...

LearnDash LMS < 4.10.3 - Sensitive Information Exposure Detection

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions. !/usr/bin/env python3 -- coding: utf-8 -- """The LearnDash LMS plug...

LibreSpeed Panel - Detect

LibreSpeed is a very lightweight speed test implemented in Javascript, using XMLHttpRequest and Web Workers. !/usr/bin/env python3 -- coding: utf-8 -- """LibreSpeed is a very lightweight speed test implemented in Javascript, using XMLHttpRequest and Web Workers.""" from kittysploit import from...

WordPress Slider Revolution - Local File Disclosure Detection

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734...

WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access Detection

WordPress Welcart e-Commerce plugin before 2.8.5 is susceptible to arbitrary file access. The plugin does not validate user input before using it to output the content of a file, which can allow an attacker to read arbitrary files on the server, obtain sensitive information, modify data, and/or...

Nucleus FTP Service - Detect

Nucleus FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nucleus FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Nucleus FTP Service -...

ServiceStack Request Logs - Unauthenticated Access Detection

Detected ServiceStack Request Logs endpoint was accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected ServiceStack Request Logs endpoint was accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Graphql Hasura Detect

Detects Graphql Hasura Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Hasura Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Hasura Detect', 'description': 'Detects Graphql Hasur...

WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection Detection

woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be...

UiPath Orchestrator Login Panel - Detect

UiPath Orchestrator login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """UiPath Orchestrator login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UiPath Orchestrator Login Panel...

PRONOTE Login Panel - Detect

PRONOTE products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PRONOTE products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PRONOTE Login Panel - Detect', 'description': 'PRONOTE produc...

POS Codekop v2.0 - Cross Site Scripting Detection

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php. !/usr/bin/env python3 -- coding: utf-8 -- """POS Codekop v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Nagios Login Panel - Detect

Nagios login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nagios login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nagios Login Panel - Detect', 'description': 'Nagios logi...

AEM Finder Detection

Detects AEM Finder. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM Finder.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM Finder Detection', 'description': 'Detects AEM Finder.', 'author': 'KittySploit...

Kubeflow Unauth Detection

Kubeflow internal data is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Kubeflow internal data is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubeflow Unauth Detection', 'description': 'Kubeflow...

Apache Allura - Detection

Detects a Apache Allura server, a open source implementation of a software "forge". !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Allura server, a open source implementation of a software "forge".""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

WordPress Wordfence 7.4.6 - Cross0Site Scripting Detection

WordPress Wordfence 7.4.6 is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Wordfence 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Wordfence 7.4.6 -...

KubeCost - Unauthenticated Dashboard Exposure Detection

KubeCost Dashboard is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """KubeCost Dashboard is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'KubeCost - Unauthenticate...

Peplink InControl - Login Panel Detection

Peplink InControl is a centralised cloud-based SD-WAN and device management platform for Peplink routers and access points, enabling remote configuration, monitoring, and SpeedFusion VPN management across distributed sites. !/usr/bin/env python3 -- coding: utf-8 -- """Peplink InControl is a...

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory Detection

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PrestaShop versions after 1.""" from kittysploit import from...

Subrion CMS Web Installer - Exposure Detection

Subrion CMS Web Installer has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Subrion CMS Web Installer has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Subrion CMS Web Installer - Exposur...

MKdocs 1.2.2 - Directory Traversal Detection

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

WordPress 1 flash gallery listing Detection

Searches for sensitive directories present in the 1-flash-gallery plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 1-flash-gallery plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...