CrushFTP WebInterface Panel - Detect

CrushFTP WebInterface login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CrushFTP WebInterface login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CrushFTP WebInterface Panel...

WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting Detection

WordPress Goto Tour & Travel theme before 2.0 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize the keywords and startdate GET parameters on its Tour List page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Goto Tour & Travel theme before 2.""...

Python Flask-Security - Open Redirect Detection

Python Flask-Security contains an open redirect vulnerability. Existing code validates that the URL specified in the next parameter is either relative or has the same network location as the requesting URL. Certain browsers accept and fill in the blanks of possibly incomplete or malformed URLs. A...

Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass Detection

Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x are vulnerable to authentication bypass. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the...

ConnectWise Setup Wizard - Exposure Detection

Detects ConnectWise Setup Wizard - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ConnectWise Setup Wizard - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ConnectWise Setup Wizard - Exposu...

TIBCO JasperReports Library - Directory Traversal Detection

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

Craft CMS Admin Login Panel - Detect

Craft CMS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Craft CMS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Craft CMS Admin Login Panel - Detect',...

Cacti - Cross-Site Scripting Detection

Cacti contains a cross-site scripting vulnerability via "http:///authchangepassword.php?ref=alert1" which can successfully execute the JavaScript payload present in the "ref" URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cacti contains a cross-site scripting vulnerability via...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

SAS Login Panel - Detect

SAS login panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAS login panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAS Login Panel - Detect', 'description': 'SAS login...

AWS S3 keys Leak Detection

AWS S3 keys are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """AWS S3 keys are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS S3 keys Leak Detection', 'description': 'AWS S3 keys are exposed.',...

Issabel PBX 4.0.0-6 - Directory Listing Detection

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory !/usr/bin/env python3 -- coding: utf-8 -- """An issue in issabel-pbx v.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Fastify Swagger-UI - Information Disclosure Detection

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

ZenML ZenML Server - Improper Authentication Detection

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. !/usr/bin/env python3 --...

DATAGERRY - Improper Access Control Detection

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. !/usr/bin/env python3 -- coding: utf-8 --...

FASTPANEL Login Panel - Detect

FASTPANEL login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FASTPANEL login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FASTPANEL Login Panel - Detect', 'description':...

IPdiva Mediation Login Panel - Detect

IPdiva Mediation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IPdiva Mediation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IPdiva Mediation Login Panel - Detect...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA...

Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download Detection

Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/downloadworkdirfile.py, letting attackers access unauthorized files, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """Agent-Zero v0.""" import re from kittysploit import from...

Kyocera Printer Panel - Detect

Kyocera printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kyocera Printer Panel - Detect', 'description':...

ZOHO ManageEngine ServiceDesk Panel - Detect

ZOHO ManageEngine ServiceDesk panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine ServiceDesk panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine...

Ivanti Endpoint Manager - Authentication Bypass Detection

Ivanti Endpoint Manager 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Endpoint Manager 2024 SU5 contain...

SMTP WP Plugin Directory Listing Detection

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access.""" from kittysploit import fro...

Zyxel - Authentication Bypass Detection

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting Detection

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Sitecore CMS - Detect

Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler URL pattern to the notfound.aspx page. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler...

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure Detection

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

SnapComms Content Manager Panel - Detect

SnapComms Content Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SnapComms Content Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SnapComms Content Manager Panel - Detect',...

SqWebMail Login Panel - Detect

SqWebMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SqWebMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SqWebMail Login Panel - Detect', 'description':...

Verizon Router Panel - Detect

Verizon router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Verizon router panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Verizon Router Panel - Detect', 'description': 'Veriz...

User Role Editor - Full Path Disclosure Detection

User Role Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """User Role Editor WordPres...

Yonyou UFIDA NC - Information Exposure Detection

After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly. !/usr/bin/env python3 -- coding: utf-8 -- """After logging in and visiting the address where the...

ZhongQing Education Cloud Platform - Information Exposure Detection

Zhongqing Naboo Education Cloud Platform is a deep application supporting teaching and research. Information leakage and unauthorized access exist in the cloud platform system. The password can be reset to 123456 through the leaked user name. The application system does not effectively verify...

SAP Fiori Login Panel - Detect

SAP Fiori login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Fiori login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Fiori Login Panel - Detect', 'description': 'SA...

Versa Concerto Actuator Endpoint - Authentication Bypass Detection

An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Versa Concerto due to improper handling of the X-Real-Ip header.Attackers could access restricted endpoints by omitting this header.The issue allowed unauthorized access to sensitive functionality, highlighting...

SiYuan <= v3.6.1 - Path Traversal

Unauthenticated path traversal via /appearance/filepath reads conf.json. !/usr/bin/env python3 -- coding: utf-8 -- """SiYuan = v3.6.1 - Path Traversal""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "SiYuan = v3.6.1 -...

WP User Manager – User Profile Builder & Membership - Local File Inclusion Detection

WP User Manager – User Profile Builder & Membership plugin for WordPress = 2.9.17 contains a local file inclusion caused by improper handling in the profile template scope function, letting unauthenticated attackers execute arbitrary PHP code, exploit requires ability to upload or control PHP...

eKare inSight Panel - Detect

eKare inSight panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """eKare inSight panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eKare inSight Panel - Detect', 'description': 'eKar...

Uniview NVR301-04S2-P4 - Cross-Site Scripting Detection

Uniview NVR301-04S2-P4 contains a reflected cross-site scripting vulnerability via the PATH of LAPI. CISA and Uniview state that this vulnerability needs to be authenticated. This is incorrect. Any PATH payload can cause XSS. A submission to Mitre has been sent to update the verbiage in the findi...

PHP CGI - Argument Injection Detection

PHP CGI - Argument Injection CVE-2024-4577 is a critical argument injection flaw in PHP. !/usr/bin/env python3 -- coding: utf-8 -- """PHP CGI - Argument Injection CVE-2024-4577 is a critical argument injection flaw in PHP.""" from kittysploit import from lib.protocols.http.httpclient import...

HAProxy Statistics Page - Detect

HAProxy statistics page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HAProxy statistics page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HAProxy Statistics Page - Detect', 'description...

ZOHO ManageEngine KeyManagerPlus Panel - Detect

ZOHO ManageEngine KeyManagerPlus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine KeyManagerPlus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner,...

Owncloud StatusPage detection

Detects Owncloud StatusPage detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Owncloud StatusPage detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Owncloud StatusPage detection', 'description'...

Nginx Test Page for OpenCloudOS Detection

OpenCloudOS test page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """OpenCloudOS test page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nginx Test Page for OpenCloudOS Detection',...

Node-RED - Unauthenticated Access Detection

Node-RED flow editor is accessible without authentication. Node-RED is a flow-based programming tool that can execute arbitrary system commands, read/write files, and make network requests. Unauthenticated access leads to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Node-RE...

Gravity SMTP WordPress Plugin - Sensitive Information Exposure Detection

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. !/usr/bin/env...

Ecessa WANworX - Login Panel Detection

Ecessa WANworX management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ecessa WANworX management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ecessa WANworX - Login Panel Detection'...

FastCGI Configuration - File Disclosure Detection

FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import fro...

GeoServer - Missing Authorization on REST API Index Detection

GeoServer contains a missing authorization vulnerability that allows unauthorized access to the REST API Index page, potentially exposing sensitive configuration information. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer contains a missing authorization vulnerability that allows...

LearnPress < 4.2.7.4 - Course Material - Information Disclosure Detection

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 --...