CyberPower - Missing Authentication Detection

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise pri.""" from...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities Detection

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. !/usr/bin/env...

WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site Scripting Detection

The Real Estate 7 premium theme for WordPress is vulnerable to Reflected Cross-Site Scripting XSS attack vector in versions up to, and including, v3.3.4 via the 'ctadditionalfeatures' option due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated...

eSMTP - Config Discovery Detection

eSMTP configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """eSMTP configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eSMTP - Config Discovery Detection', 'description':...

Microsoft SQL Server Reporting Services - Remote Code Execution Detection

Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it incorrectly handles page requests. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it...

GDidees CMS v3.9.1 - Arbitrary File Download Detection

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php. !/usr/bin/env python3 -- coding: utf-8 -- """GDidees CMS v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PHPJabbers Food Delivery Script - SQL Injection Detection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AnythingLLM - Information Disclosure Detection

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticate...

Libvirt Exporter Metrics Detection

Libvirt Exporter is leaking metrics. !/usr/bin/env python3 -- coding: utf-8 -- """Libvirt Exporter is leaking metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Libvirt Exporter Metrics Detection', 'description...

AVCON6 org_execl_download.action - Arbitrary File Download Detection

Arbitrary File Download vulnerability in the orgexecldownload.action of the AVCON6 system management platform, through which an attacker can download arbitrary files from the server !/usr/bin/env python3 -- coding: utf-8 -- """Arbitrary File Download vulnerability in the orgexecldownload.""" impo...

Contao <4.13.3 - Cross-Site Scripting Detection

Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag. !/usr/bin/env python3 -- coding: utf-8 -- """Contao prior to 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PMB 7.4.6 - Cross-Site Scripting Detection

PMB 7.4.6 contains a cross-site scripting vulnerability via the query parameter at /admin/convert/exportz3950new.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticatio...

OpenCPU - Remote Code Execution Detection

Check for remote code execution via OpenCPU was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """Check for remote code execution via OpenCPU was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenC...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

FRPS Dashboard - Detect

FRPS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FRPS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FRPS Dashboard - Detect', 'description': 'FRPS...

BoltCMS Login Panel - Detect

BoltCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BoltCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BoltCMS Login Panel - Detect', 'description': 'BoltCMS...

NETGEAR - Authentication Bypass Detection

NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers are vulnerable to authentication bypass vulnerabilities which could allow network-adjacent attackers to bypass authentication on affected installations...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion Detection

Razer Sila Gaming Router 2.0.441api-2.0.418 is vulnerable to local file inclusion which could allow attackers to read arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """Razer Sila Gaming Router 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Cisco Web UI Login - Detect

Detects the presence of Cisco Web UI login panels !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Cisco Web UI login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Web UI Login -...

Monstra CMS <=3.0.4 - Cross-Site Scripting Detection

Monstra CMS 3.0.4 and earlier contains a cross-site scripting vulnerability via index.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

YOURLS - Detection

Detects if the target is running a YOURLS Your Own URL Shortener server !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the target is running a YOURLS Your Own URL Shortener server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SquirrelMail Login Panel - Detect

SquirrelMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail Login Panel - Detect',...

Prometheus Promtail - Exposure Detection

Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal.""" from kittysploit import from...

MongoDB Exception - Page Detection

Detects MongoDB Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MongoDB Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Exception - Page Detection', 'description':...

XWiki < 14.10.5 - Cross-Site Scripting Detection

XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject JavaScript through the xcontinue parameter. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is vulnerable to reflected XSS via the previewactions template.""" from kittysploit import...

VMware vSphere Client (HTML5) - Remote Code Execution Detection

The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

AC Smart II - Authentication Bypass Detection

AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """AC...

Oracle iPlanet Web Server 7.0.x - Authentication Bypass Detection

Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. !/usr/bin/env...

Azure - APIM Secret Key Detection

Azure APIM Secret Key !/usr/bin/env python3 -- coding: utf-8 -- """Azure APIM Secret Key.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure - APIM Secret Key Detection', 'description': 'Azure APIM Secret Key',...

Flyte Console <0.52.0 - Server-Side Request Forgery Detection

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or...

Oracle Fusion - Directory Traversal/Local File Inclusion Detection

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Business Intelligence Enterprise Edition 5.""" import re from kittysploit import...

EventON Lite < 2.1.2 - Arbitrary File Download Detection

The plugin does not validate that the eventid parameter in its eventonicsdownload ajax action is a valid Event, allowing unauthenticated visitors to access any Post including unpublished or protected posts content via the ics export functionality by providing the numeric id of the post...

Welcart eCommerce <=2.7.7 - Local File Inclusion Detection

Welcart eCommerce 2.7.7 and before are vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Welcart eCommerce 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation Detection

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Email Security version 10.""" from kittysploit import from lib.protocols.http.httpclient...

Rundeck Login Panel - Detect

Rundeck login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rundeck login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rundeck Login Panel - Detect', 'description': 'Rundeck...

Bank Locker Management System - Cross-Site Scripting Detection

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

HP Color LaserJet Detection

HP color laserJet panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP color laserJet panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Color LaserJet Detection', 'description': 'H...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

Adobe AEM Explorer NodeTypes Exposure Detection

Adobe AEM Explorer NodeTypes is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Explorer NodeTypes is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Explorer NodeTypes Exposure...

Versa Concerto Actuator Endpoint - Authentication Bypass Detection

An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Versa Concerto due to improper handling of the X-Real-Ip header.Attackers could access restricted endpoints by omitting this header.The issue allowed unauthorized access to sensitive functionality, highlighting...

Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

XWiki >= 6.2-milestone-1 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

Flutter Web Application - Detect

Detect flutter web apps looking for flutterbootstrap.js,main.dart.js and flutterserviceworker.js files. !/usr/bin/env python3 -- coding: utf-8 -- """Detect flutter web apps looking for flutterbootstrap.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

TecConnect OpenMessaging Webservice Detection

TecCom TecConnect OpenMessaging webservice was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TecCom TecConnect OpenMessaging webservice was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TecConnec...

Advantech R-SeeNet - Cross-Site Scripting Detection

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the deviceid parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Advantech R-SeeNet contains a...

Brute Ratel C4 - Detect

Brute Ratel C4 BRc4 is a legit red-teaming tool designed from the ground up with evasion capabilities in mind, but in the wrong hands can cause significant damage. Learn how to protect your organization with our Brute Ratel C4 Spotlight. !/usr/bin/env python3 -- coding: utf-8 -- """Brute Ratel C4...