Mitel NuPoint Unified Messaging Panel - Detect

Mitel NuPoint Unified Messaging login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mitel NuPoint Unified Messaging login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mitel...

Moodle Changelog File Detect

Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle version. !/usr/bin/env python3 -- coding: utf-8 -- """Moodle has a file which describes API changes in core libraries and APIs, and can be used to discover Moodle v.""" from kittysploit...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

OpenVas Login Panel - Detect

An OpenVas Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An OpenVas Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenVas Login Panel - Detect',...

Red Lion Control Panel - Detect

Detects Red Lion Control Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Red Lion Control Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Red Lion Control Panel - Detect',...

Request Baskets - Exposure Detection

Request Baskets is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Request Baskets is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Request Baskets - Exposure Detection', 'description': 'Request...

Joplin Server Login - Panel Detection

Joplin Server login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Joplin Server login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Joplin Server Login - Panel Detection',...

Lansweeper Login Panel - Detect

Lansweeper login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lansweeper Login Panel - Detect', 'description':...

LUA Runtime Error - Page Detection

Detects LUA Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LUA Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LUA Runtime Error - Page Detection', 'description':...

LuCi Login Panel - Detect

LuCi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LuCi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LuCi Login Panel - Detect', 'description': 'LuCi login panel...

Smoothwall Firewall - Login Panel Detection

Smoothwall is a UK-based firewall and web filtering appliance commonly deployed in schools, local authorities, and enterprises for internet safety and network security management. !/usr/bin/env python3 -- coding: utf-8 -- """Smoothwall is a UK-based firewall and web filtering appliance commonly...

SonicWall Management Admin Login Panel - Detect

SonicWall Management admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Management admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SonicWall...

SOUND4 IMPACT/FIRST/PULSE/Eco <= 2.x - Authentication Bypass Detection

The application suffers from an SQL Injection vulnerability. Input passed through the 'username' POST parameter in 'index.php' is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and...

Home Assistant Panel Detection

Detects Home Assistant Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Home Assistant Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Home Assistant Panel Detection', 'description': 'Detects Home...

Artica Web Proxy Detect

Detects Artica Web Proxy Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Artica Web Proxy Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Artica Web Proxy Detect', 'description': 'Detects Artica...

TurnKey LAMP Panel - Detect

TurnKey LAMP Control Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TurnKey LAMP Control Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TurnKey LAMP Panel - Detect',...

elFinder 2.1.58 - Remote Code Execution Detection

elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. !/usr/bin/env python3 -- coding: utf-8 -- """elFinder 2.""" from...

Wordpress Brandfolder - Remote/Local File Inclusion Detection

WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote server and disclose their content. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder allows remote attackers to access arbitrary files that reside on the local and remote...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the 'success' parameter, which is inserted into the document with insufficient sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """WWBN AVideo 11.""" from kittysploit import from...

LabKey Server Login Panel - Detect

LabKey Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LabKey Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LabKey Server Login Panel - Detect',...

Taiwanese Travel - Local File Inclusion Detection

The vulnerability in '/index.php?page=' allows for Local File Inclusion LFI, granting attackers the ability to include and potentially execute files on the server, compromising the application's security !/usr/bin/env python3 -- coding: utf-8 -- """The vulnerability in '/index.""" import re from...

Slims CMS - Detect

Detects Senayan Library Management System SLiMS CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Senayan Library Management System SLiMS CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Slims CMS - Detect...

Jabber XMPP Protocol - Detect

Jabber XMPP protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jabber XMPP protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Jabber XMPP Protocol -...

DokuWiki - Cross-Site Scripting Detection

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Asanhamayesh CMS 3.4.6 - Local File Inclusion Detection

Asanhamayesh CMS 3.4.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Asanhamayesh CMS 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Asanhamayesh CMS 3.4.6 - Local...

Royal Event Management System Admin Panel - Detect

Royal Event Management System admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Royal Event Management System admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Royal Event...

uDraw <3.3.3 - Local File Inclusion Detection

uDraw before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the response. As a result, unauthenticated users...

WordPress Sniplets <=1.2.2 - Cross-Site Scripting Detection

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter ...

CouchDB Admin Default - Detect

CouchDB is susceptible to requests in the context of an admin user. !/usr/bin/env python3 -- coding: utf-8 -- """CouchDB is susceptible to requests in the context of an admin user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

nopCommerce Installer - Detect

nopCommerce installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """nopCommerce installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'nopCommerce Installer - Detect',...

Dell Remote Web Access Panel - Detect

Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops hosted on Dell servers. !/usr/bin/env python3 -- coding: utf-8 -- """Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops .""" fro...

Cowboy - Detect

Cowboy was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cowboy was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cowboy - Detect', 'description': 'Cowboy was detected.', 'author': 'KittySploit...

DXPlanning Panel - Detect

DXPlanning was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DXPlanning was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DXPlanning Panel - Detect', 'description': 'DXPlanning was detected.',...

Adobe Connect Central Version Detection

Detects Adobe Connect Central Version. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe Connect Central Version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Central Version Detection',...

MikroTik RouterOS API - Detect

MikroTik RouterOS API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MikroTik RouterOS API was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'MikroTik RouterOS AP...

Tongda OA v11.5 swfupload_new.php - SQL Injection Detection

There is a SQL injection vulnerability in the swfuploadnew.php file of Tongda OA v11.5. An attacker can obtain sensitive information of the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is a SQL injection vulnerability in the swfuploadnew.""" from kittysploi...

CVSweb - Detect

CVSweb is a WWW interface for CVS repositories with which you can browse a file hierarchy on your browser to view each file's revision history in a very handy manner. !/usr/bin/env python3 -- coding: utf-8 -- """CVSweb is a WWW interface for CVS repositories with which you can browse a file...

PostgreSQL History - Exposure Detection

Exposed PostgreSQL history files .psqlhistory were detected. These files contain a record of executed SQL commands and may disclose sensitive information like passwords, database schemas, and query logic. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed PostgreSQL history files .""" import re...

WordPress Amministrazione Aperta 3.7.3 - Local File Inclusion Detection

WordPress Amministrazione Aperta 3.7.3 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Amministrazione Aperta 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

FiftyOne Panel - Detect

FiftyOne, an open-source dataset visualization and curation tool for computer vision workflows built by Voxel51, was detected. The app ships with no authentication by default, so any exposed instance directly served browsable dataset content images, labels, metadata to unauthenticated visitors. T...

Psalm Configuration Exposure - Detect

Psalm configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Psalm configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Psalm Configuration Exposure - Detect',...

HAL Management Console Panel Detection

HAL Management Console login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """HAL Management Console login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HAL Management Consol...

Securepoint UTM - Leaking Remote Memory Contents Detection

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not use...

Joomla! Component Fabrik 2.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Fabrik comfabrik component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Fabrik comfabrik...

WordPress Download Shortcode 0.2.3 - Local File Inclusion Detection

WordPress Download Shortcode 0.2.3 is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Prior versions may also be affected...

Joomla! Component Percha Image Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Image Attach comperchaimageattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Java Spring Detection

Detects Java Spring Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Java Spring Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Java Spring Detection', 'description': 'Detects Java Spring...

Blesta Installer Exposure Detection

Blesta is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Blesta is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Unauthenticated Spark WebUI Detection

Spark WebUI is exposed to external users without any authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Spark WebUI is exposed to external users without any authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Beszel Login Panel - Detect

Beszel products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Beszel products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Beszel Login Panel - Detect', 'description': 'Beszel products w...