EventON Lite < 2.1.2 - Arbitrary File Download Detection

The plugin does not validate that the eventid parameter in its eventonicsdownload ajax action is a valid Event, allowing unauthenticated visitors to access any Post including unpublished or protected posts content via the ics export functionality by providing the numeric id of the post...

IceWarp Webmail Server v10.2.1 - Cross Site Scripting Detection

Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Icewarp Icearp v10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

PrestaShop TshirteCommerce - Directory Traversal Detection

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. !/usr/bin/env python3 -- coding: utf-8 -- """The Custom...

PrestaShop tshirtecommerce - Directory Traversal Detection

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. !/usr/bin/env python3 -- coding: utf-8 -- """The Custom...

PHPJabbers Food Delivery Script - SQL Injection Detection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PHPJabbers Food Delivery Script v3.0 - SQL Injection Detection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Ametys CMS Information Disclosure Detection

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...

PMB 7.4.6 - Cross-Site Scripting Detection

PMB 7.4.6 contains a cross-site scripting vulnerability via the query parameter at /admin/convert/exportz3950new.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticatio...

GDidees CMS v3.9.1 - Arbitrary File Download Detection

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /admin/imgdownload.php. !/usr/bin/env python3 -- coding: utf-8 -- """GDidees CMS v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LearnPress Plugin < 4.2.0 - Local File Inclusion Detection

Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin = 4.1.7.3.2 versions. !/usr/bin/env python3 -- coding: utf-8 -- """Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin = 4.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Thinkphp Lang - Local File Inclusion Detection

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php...

Bank Locker Management System - Cross-Site Scripting Detection

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

Flatpress < 1.3 - Path Traversal Detection

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. !/usr/bin/env python3 -- coding: utf-8 -- """Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Welcart eCommerce <=2.7.7 - Local File Inclusion Detection

Welcart eCommerce 2.7.7 and before are vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Welcart eCommerce 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

ILIAS eLearning <7.16 - Open Redirect Detection

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS eLearning before 7.""" import...

Progress Kemp LoadMaster Panel - Detect

A Progress Kemp LoadMaster panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Progress Kemp LoadMaster panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Progress Kemp LoadMaster Pane...

POP3 Protocol - Detect

POP3 protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """POP3 protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'POP3 Protocol - Detect',...

Signet Explorer Dashboard - Detect

Signet Explorer Dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Signet Explorer Dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Signet Explorer Dashboard - Detect',...

MaxSite CMS > V106 - Cross-Site Scripting Detection

A reflected cross-site scripting vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page." !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting vulnerability in MaxSite CMS before V106 via product/page/...

Netris Dashboard Panel - Detect

Netris Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Netris Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Netris Dashboard Panel - Detect', 'description':...

Cherokee HTTPD <=0.5 - Cross-Site Scripting Detection

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. !/usr/bin/env python3 --...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SolarWinds Serv-U File Server Panel - Detect

SolarWinds Serv-U File Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Serv-U File Server panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds...

Cascade CMS Panel - Detect

Cascade CMS was detected — a web content management system for managing stand-out websites. !/usr/bin/env python3 -- coding: utf-8 -- """Cascade CMS was detected — a web content management system for managing stand-out websites.""" from kittysploit import from lib.protocols.http.httpclient import...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

ITMS-Misconfigured Detection

Detection of misconfigured ServiceNow ITSM instances. !/usr/bin/env python3 -- coding: utf-8 -- """Detection of misconfigured ServiceNow ITSM instances.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Keystone 6 Login Page - Open Redirect and Cross-Site Scripting Detection

On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS. !/usr/bin/env python3 -- coding: utf-8 -- """On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalat.""" from...

VMware - Local File Inclusion Detection

VMware Workspace ONE Access, Identity Manager, and Realize Automation are vulnerable to local file inclusion because they contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access withou...

WordPress Plugin Hello Dolly - Full Path Disclosure Detection

WordPress Plugin Hello Dolly plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Hello Dolly plugin files are publicly accessibl...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

Barracuda SSL VPN Log In Detection

The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any web browser. !/usr/bin/env python3 -- coding: utf-8 -- """The Barracuda SSL VPN is an integrated hardware and software solution enabling secure,...

Magento Cacheleak Detection

Magento Cacheleak is an implementation vulnerability, result of bad implementation of web-server configuration for Magento platform. Magento was developed to work under the Apache web-server which natively works with .htaccess files, so all needed configuration directives specific for various...

Mezzanine CMS - Detect

Detects instances of Mezzanine CMS based on unique fingerprints and identifiers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects instances of Mezzanine CMS based on unique fingerprints and identifiers.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Janitza GridVis Energy Management - Detect

Janitza GridVis is an energy monitoring and management software platform by Janitza Electronics GmbH. It provides real-time power quality analysis, energy data logging, and grid visualisation for industrial facilities. !/usr/bin/env python3 -- coding: utf-8 -- """Janitza GridVis is an energy...

Laravel Sanctum - Stateful Domain CSRF Misconfiguration Detection

Laravel Sanctum's SPA authentication uses cookie-based session authentication for first-party single-page applications. The /sanctum/csrf-cookie endpoint issues XSRF-TOKEN cookies to requesting origins. When SANCTUMSTATEFULDOMAINS is misconfigured with wildcard or overly permissive values, the...

ArGoSoft FTP Service - Detect

ArGoSoft FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ArGoSoft FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ArGoSoft FTP Service -...

Testignore - File Disclosure Detection

Detected that the .testignore file was publicly accessible, potentially revealing the project structure, sensitive file paths, and internal directory organization. !/usr/bin/env python3 -- coding: utf-8 -- """Detected that the .""" import re from kittysploit import from...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting Detection

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

TYPO3 Installer Detection

TYPO3 is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """TYPO3 is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Phoenix Framework - Open Redirect Detection

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Framework versions 1.""" import re from...

V2924 Admin Login Panel - Detect

V2924 admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """V2924 admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'V2924 Admin Login Panel - Detect', 'description...

Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution Detection

Micro Focus Operations Bridge Manager in versions 2020.05 and below is vulnerable to remote code execution via UCMDB. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Data Center Automation. An attack requires network access and authentication as a...

Bitrix24 <=20.0.0 - Cross-Site Scripting Detection

The Web Application Firewall in Bitrix24 up to and including 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI. !/usr/bin/env python3 -- coding: utf-8 -- """The Web Application Firewall in Bitrix24 up to and including 20.""" from kittysploit...

Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting Detection

Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on the loadframe page. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on.""" from...

Manage Cabinet Register - Exposed Detection

The path to the Cabinet Storage is omniapp/pages/cabinet/managecabinet.jsf?Action=1. If exposed, it gives an attacker insight into information such as Storage Volume Name, Cabinet Name, it's alias, Deployed AppServer IP Address and Port !/usr/bin/env python3 -- coding: utf-8 -- """The path to the...

MetaView Explorer Installer Detection

MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """MetaView Explorer is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...

OKIOK S-Filer Portal Login Panel - Detect

OKIOK S-Filer Portal login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OKIOK S-Filer Portal login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OKIOK S-Filer Portal Login...

activecollab detect

Detects activecollab detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects activecollab detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'activecollab detect', 'description': 'Detects activecollab...

AMPPS Admin Login Panel Detection

An AMPPS Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AMPPS Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AMPPS Admin Login Panel Detection',...