Mitel MiCollab Login Panel - Detect

Mitel MiCollab login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel MiCollab login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel MiCollab Login Panel - Detect',...

CODESYS WebVisu - Panel Detection

CODESYS WebVisu is the web-based HMI Human-Machine Interface component of the CODESYS industrial automation runtime. It provides browser-based access to PLC visualizations and industrial control interfaces. Exposed instances may reveal real-time process data and control functions without...

WordPress WPML Multilingual CMS < 4.6.1 - Cross-Site Scripting Detection

The WPML Multilingual CMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions prior to 4.6.1. The plugin does not escape some URL attributes before outputting them to a page, allowing attackers to inject malicious JavaScript which may be executed in the browser of...

GROWI Installer - Exposure Detection

Checks for the presence of a GROWI Installer. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a GROWI Installer.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GROWI Installer - Exposure...

Prometheus exporter detect

Prometheus exporter detector !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus exporter detector.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus exporter detect', 'description': 'Prometheus exporter...

WordPress Grimag <1.1.1 - Open Redirection Detection

WordPress Grimag theme before 1.1.1 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Grimag theme befo...

QuestDB Console - Detect

QuestDB console was detected. !/usr/bin/env python3 -- coding: utf-8 -- """QuestDB console was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QuestDB Console - Detect', 'description': 'QuestDB console was...

SCS Remote Monitoring and Control Login Panel - Detect

SCS Remote Monitoring and Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SCS Remote Monitoring and Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SCS...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass

Kentico Staging SyncServer accepts UsernameToken without password WT-2025-0011. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico Xperience 13 CMS - Staging Service Authentication Bypass""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Kerio Control v9.2.5 - CRLF Injection Detection

Kerio Control, formerly known as Kerio WinRoute Firewall, has been found vulnerable to multiple HTTP Response Splitting vulnerabilities in product affecting versions 9.2.5 !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Control, formerly known as Kerio WinRoute Firewall, has been found...

Zzzcms 1.75 - Cross-Site Scripting Detection

ZzzCMS A Lightweight ASP.NET content management system is vulnerable to XSS Cross-Site Scripting . !/usr/bin/env python3 -- coding: utf-8 -- """ZzzCMS A Lightweight ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Gabia Server - Detection

Detects gabia web server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects gabia web server.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gabia Server - Detection', 'description': 'Detects gabia web...

LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization Detection

LottieFiles LottieFiles = 3.0.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers exploit missing authorization, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """LottieFiles...

Joomla! Component Archery Scores 1.0.6 - Local File Inclusion Detection

A directory traversal vulnerability in archeryscores.php in the Archery Scores comarcheryscores component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """...

Symantec Endpoint Protection Manager Login Panel - Detect

Symantec Endpoint Protection Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Endpoint Protection Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

SSL VPN Session Hijacking Detection

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. !/usr/bin/env python3 -- coding: utf-8 -- """An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to by.""" from...

Zzcms `register_nodb.php` - Cross Site Scripting Detection

Identified a reflected Cross-Site Scripting XSS vulnerability in registernodb.php of ZZCMS, which allowed injection of malicious scripts via user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Identified a reflected Cross-Site Scripting XSS vulnerability in registernodb.""" from...

AVEVA Edge SCADA - Login Panel Detection

AVEVA Edge SCADA web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """AVEVA Edge SCADA web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AVEVA Edge...

Joomla! Component JInventory 1.23.02 - Local File Inclusion Detection

A directory traversal vulnerability in jinventory.php in the JInventory comjinventory component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python...

Thinkphp Lang - Local File Inclusion Detection

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php...

Sharp Multifunction Printers - Directory Listing Detection

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to an...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SMTP4Dev Interface - Exposed Detection

Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations.""" from kittysploit import from...

IPdiva Mediation Login Panel - Detect

IPdiva Mediation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IPdiva Mediation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IPdiva Mediation Login Panel - Detect...

TileServer API - Cross Site Scripting Detection

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. !/usr/bin/env python3 -- coding: utf-8 -- """tileserver-gl up to v4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SABnzbd - Unauthenticated Web Interface Access Detection

Detected SABnzbd found with the web interface accessible without authentication. The config page is exposed without login, leaking the API key, config file path, server parameters, and system information to unauthenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SABnzbd found...

Cloudflare Access - Login Panel Detection

Detected exposed Cloudflare Access login pages. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Cloudflare Access login pages.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudflare Access - Login...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

MLflow Absolute Path Traversal Detection

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. !/usr/bin/env python3 -- coding: utf-8 -- """Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure Detection

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

Tomcat Exposed - Detect

An Apache Tomcat instance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Tomcat instance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tomcat Exposed - Detect', 'description': 'A...

Yarn Lock File Disclosure Detection

The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. !/usr/bin/env python3 -- coding: utf-8 -- """The yarn.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yarn...

SolarView Compact <= 6.00 - Local File Inclusion Detection

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary read file vulnerability in SolarView Compact 6.""" from kittysploit import...

Wanhu OA smartUpload.jsp - Arbitrary File Upload Detection

Wanhu OA smartUpload.jsp file has a file upload interface and does not filter file types, resulting in arbitrary file upload vulnerabilities. Malicious JSP files can be uploaded directly. !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA smartUpload.""" from kittysploit import from...

Label Studio < 1.18.0 - Reflected XSS Detection

Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -...

Splash - Detect

Splash rendering service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Splash rendering service was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splash - Detect', 'description': 'Splash...

pyLoad Flask Config - Access Control Detection

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. !/usr/bin/env python3 -- coding: utf-8 -- """pyLoad...

Avatier Password Management Panel Detection

An Avatier password management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Avatier password management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Avatier Password...

Pandora FMS Mobile Console Login Panel - Detect

Pandora FMS Mobile Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pandora FMS Mobile Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pandora FMS Mobil...

SonicWall SRA 4600 VPN - SQL Injection Detection

The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability.""" from kittysploit import from...

Grafana Unauthenticated Access Detection

Detects Grafana instances configured with anonymous access enabled, allowing unauthenticated users to access dashboards, data sources, organization info, and potentially sensitive monitoring data without any credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grafana instances...

YesWiki Panel - Detect

YesWiki panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YesWiki Panel - Detect', 'description': 'YesWiki panel was...

VMware vCloud Director Panel - Detect

VMware vCloud Director panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware vCloud Director panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware vCloud Director Panel - Detect...

WordPress user registration enabled Detection

Detects WordPress user registration enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress user registration enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress user registration enabl...

WordPress Plugin Site Kit by Google - Full Path Disclosure Detection

WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Joomla! Component Canteen 1.0 - Local File Inclusion Detection

A SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A SQL injection vulnerability in menu.""" import re from...

News Script Pro 2.4 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Label Studio < 1.16.0 - Cross-Site Scripting Detection

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

Apache ShardingSphere ElasticJob-UI privilege escalation Detection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

SOAP-based ASP.NET web services ASMX - Detect

SOAP-based ASP.NET web services collection was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SOAP-based ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SOAP-based ASP.NET web services ASMX - Detect',...