WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site Scripting Detection

The Real Estate 7 premium theme for WordPress is vulnerable to Reflected Cross-Site Scripting XSS attack vector in versions up to, and including, v3.3.4 via the 'ctadditionalfeatures' option due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated...

GDidees CMS v3.9.1 - Arbitrary File Download Detection

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php. !/usr/bin/env python3 -- coding: utf-8 -- """GDidees CMS v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PHPJabbers Food Delivery Script - SQL Injection Detection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AnythingLLM - Information Disclosure Detection

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticate...

Libvirt Exporter Metrics Detection

Libvirt Exporter is leaking metrics. !/usr/bin/env python3 -- coding: utf-8 -- """Libvirt Exporter is leaking metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Libvirt Exporter Metrics Detection', 'description...

AVCON6 org_execl_download.action - Arbitrary File Download Detection

Arbitrary File Download vulnerability in the orgexecldownload.action of the AVCON6 system management platform, through which an attacker can download arbitrary files from the server !/usr/bin/env python3 -- coding: utf-8 -- """Arbitrary File Download vulnerability in the orgexecldownload.""" impo...

Contao <4.13.3 - Cross-Site Scripting Detection

Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag. !/usr/bin/env python3 -- coding: utf-8 -- """Contao prior to 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PMB 7.4.6 - Cross-Site Scripting Detection

PMB 7.4.6 contains a cross-site scripting vulnerability via the query parameter at /admin/convert/exportz3950new.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticatio...

OpenCPU - Remote Code Execution Detection

Check for remote code execution via OpenCPU was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """Check for remote code execution via OpenCPU was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenC...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

FRPS Dashboard - Detect

FRPS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FRPS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FRPS Dashboard - Detect', 'description': 'FRPS...

BoltCMS Login Panel - Detect

BoltCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BoltCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BoltCMS Login Panel - Detect', 'description': 'BoltCMS...

Cisco Web UI Login - Detect

Detects the presence of Cisco Web UI login panels !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Cisco Web UI login panels.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Web UI Login -...

YOURLS - Detection

Detects if the target is running a YOURLS Your Own URL Shortener server !/usr/bin/env python3 -- coding: utf-8 -- """Detects if the target is running a YOURLS Your Own URL Shortener server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SquirrelMail Login Panel - Detect

SquirrelMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail Login Panel - Detect',...

Prometheus Promtail - Exposure Detection

Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal.""" from kittysploit import from...

MongoDB Exception - Page Detection

Detects MongoDB Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MongoDB Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MongoDB Exception - Page Detection', 'description':...

XWiki < 14.10.5 - Cross-Site Scripting Detection

XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject JavaScript through the xcontinue parameter. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is vulnerable to reflected XSS via the previewactions template.""" from kittysploit import...

AC Smart II - Authentication Bypass Detection

AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """AC...

Oracle iPlanet Web Server 7.0.x - Authentication Bypass Detection

Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. !/usr/bin/env...

Azure - APIM Secret Key Detection

Azure APIM Secret Key !/usr/bin/env python3 -- coding: utf-8 -- """Azure APIM Secret Key.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure - APIM Secret Key Detection', 'description': 'Azure APIM Secret Key',...

Flyte Console <0.52.0 - Server-Side Request Forgery Detection

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or...

Oracle Fusion - Directory Traversal/Local File Inclusion Detection

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Business Intelligence Enterprise Edition 5.""" import re from kittysploit import...

EventON Lite < 2.1.2 - Arbitrary File Download Detection

The plugin does not validate that the eventid parameter in its eventonicsdownload ajax action is a valid Event, allowing unauthenticated visitors to access any Post including unpublished or protected posts content via the ics export functionality by providing the numeric id of the post...

Welcart eCommerce <=2.7.7 - Local File Inclusion Detection

Welcart eCommerce 2.7.7 and before are vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Welcart eCommerce 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation Detection

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Email Security version 10.""" from kittysploit import from lib.protocols.http.httpclient...

Rundeck Login Panel - Detect

Rundeck login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rundeck login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rundeck Login Panel - Detect', 'description': 'Rundeck...

Bank Locker Management System - Cross-Site Scripting Detection

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

HP Color LaserJet Detection

HP color laserJet panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP color laserJet panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Color LaserJet Detection', 'description': 'H...

HighMail Admin Login Panel - Detect

HighMail admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HighMail admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HighMail Admin Login Panel - Detect',...

Adobe AEM Explorer NodeTypes Exposure Detection

Adobe AEM Explorer NodeTypes is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Explorer NodeTypes is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Explorer NodeTypes Exposure...

Versa Concerto Actuator Endpoint - Authentication Bypass Detection

An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Versa Concerto due to improper handling of the X-Real-Ip header.Attackers could access restricted endpoints by omitting this header.The issue allowed unauthorized access to sensitive functionality, highlighting...

Matrix Server Detect

Detects Matrix servers based on .well-known entries. See https://en.wikipedia.org/wiki/Matrixprotocol !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matrix servers based on .""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

XWiki >= 6.2-milestone-1 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

Flutter Web Application - Detect

Detect flutter web apps looking for flutterbootstrap.js,main.dart.js and flutterserviceworker.js files. !/usr/bin/env python3 -- coding: utf-8 -- """Detect flutter web apps looking for flutterbootstrap.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure Detection

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to password disclosure because the password.html page of the web management interface contains the administrator account password in plaintext. !/usr/bin/env python3 -- coding: utf-8 -- """Acexy Wireless-N WiFi Repeater REV 1.""" from kittysplo...

IceWarp Webmail Server v10.2.1 - Cross Site Scripting Detection

Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Icewarp Icearp v10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

ACME mini_httpd <1.30 - Local File Inclusion Detection

ACME minihttpd before 1.30 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ACME minihttpd before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ACME minihttpd 1.30 -...

QuickCMS Installation Wizard Detection

PMM is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """PMM is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

qdPM 9.2 - DB Credentials Exposure Detection

qdPM 9.2 database credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 - DB Credentials Exposure Detection', 'description': 'qdPM...

TecConnect OpenMessaging Webservice Detection

TecCom TecConnect OpenMessaging webservice was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TecCom TecConnect OpenMessaging webservice was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TecConnec...

Advantech R-SeeNet - Cross-Site Scripting Detection

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the deviceid parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Advantech R-SeeNet contains a...

Brute Ratel C4 - Detect

Brute Ratel C4 BRc4 is a legit red-teaming tool designed from the ground up with evasion capabilities in mind, but in the wrong hands can cause significant damage. Learn how to protect your organization with our Brute Ratel C4 Spotlight. !/usr/bin/env python3 -- coding: utf-8 -- """Brute Ratel C4...

Pure-FTPd Service - Detect

Pure-FTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pure-FTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Pure-FTPd Service -...

IBM Decision Server Runtime Panel- Detect

IBM Decision Server Runtime was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Decision Server Runtime was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Decision Server Runtime Panel-...

SAUTER moduWeb Vision Panel - Detect

Sauter moduWeb Vision was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sauter moduWeb Vision was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAUTER moduWeb Vision Panel - Detect', 'description...

Zenphoto <1.5 Installer - Detect

Zenphoto setup page before version 1.5 is susceptible to sensitive information disclosure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Zenphoto setup page before version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

OpenSNS - Remote Code Execution Detection

OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint.""" import re from kittysploit import from...