Atlassian Connect Descriptor - Detect

The app descriptor is a JSON file atlassian-connect. json that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend. !/usr/bin/env python3 -- coding: utf-8 -- """The app descriptor is a...

Joomla! ChronoForums 2.0.11 - Local File Inclusion Detection

Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials. !/usr/bin/env python3 -- coding: utf-8 --...

Twonky Server 8.5.2 on Linux and Windows - Log File Exposure Detection

Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Twonky Server 8."...

VMware vCloud Director Panel - Detect

VMware vCloud Director panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware vCloud Director panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware vCloud Director Panel - Detect...

Hetzner Cloud Detect

Detects Hetzner Cloud Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hetzner Cloud Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hetzner Cloud Detect', 'description': 'Detects Hetzner Cloud...

Fortinet FortiSIEM - Panel Detection

FortiSIEM login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FortiSIEM login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortinet FortiSIEM - Panel Detection',...

Apache Hbase Unauth Detection

Apache Hbase is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hbase is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Hbase Unauth Detection', 'description': 'Apache Hbase is exposed.'...

Skyvern Panel - Detect

Skyvern is an open-source AI agent that automates browser-based workflows using LLMs and computer vision !/usr/bin/env python3 -- coding: utf-8 -- """Skyvern is an open-source AI agent that automates browser-based workflows using LLMs and computer vision.""" from kittysploit import from...

D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...

AVCON6 - Arbitrary File Download Detection

File Download vulnerability in the download.action of the AVCON6 system management platform, through which an attacker can download arbitrary files from the server !/usr/bin/env python3 -- coding: utf-8 -- """File Download vulnerability in the download.""" import re from kittysploit import from...

SiYuan Note - Cross-Site Scripting Detection

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

Contest Gallery < 13.1.0.6 - SQL injection Detection

The plugin does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users...

Samsung WLAN AP WEA453e - Local File Inclusion Detection

Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Wanhu OA download_ftp.jsp - Arbitrary File Read Detection

There is an arbitrary file download vulnerability in the Wanhu OA downloadftp.jsp file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file download vulnerability in the Wanhu OA downloadftp.""" from...

Liferay Portal - Cross-site Scripting Detection

A Cross-site scripting XSS vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

Babel Configuration - Detect

Babel configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Babel configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Babel Configuration - Detect',...

Vite Configuration - File Exposure Detection

The vite.config.js file is used to customize the behavior of Vite and specify various settings for your project. !/usr/bin/env python3 -- coding: utf-8 -- """The vite.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

LuxTrust COSI - Detect

LuxTrust COSI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LuxTrust COSI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LuxTrust COSI - Detect', 'description': 'LuxTrust COSI was...

HCP Anywhere - Detect

HCP Anywhere was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HCP Anywhere was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HCP Anywhere - Detect', 'description': 'HCP Anywhere was detected.',...

Roundcube CVE-2025-49113 Detection

Fingerprints Roundcube via rcversion and flags builds before 1.5.10 / 1.6.x before 1.6.11 as vulnerable to post-auth PHP deserialization RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Roundcube versions vulnerable to CVE-2025-49113.""" from kittysploit import from...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion Detection

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjFooterNavigationConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site...

cPanel API Codes Panel - Detect

cPanel API Codes panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel API Codes panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'cPanel API Codes Panel - Detect', 'description':...

Direct Connect P2P - Detect

Detects Direct Connect P2P - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Direct Connect P2P - Detect.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Direct Connect P2P...

Pypiserver <1.2.5 - Carriage Return Line Feed Injection Detection

Pypiserver through 1.2.5 and below is susceptible to carriage return line feed injection. An attacker can set arbitrary HTTP headers and possibly conduct cross-site scripting attacks via a %0d%0a in a URI. !/usr/bin/env python3 -- coding: utf-8 -- """Pypiserver through 1.""" import re from...

Ecology - Information Exposure Detection

The "ecology" component exposes a file that contains sensitive database credentials dbuser/dbpass. !/usr/bin/env python3 -- coding: utf-8 -- """The "ecology" component exposes a file that contains sensitive database credentials dbuser/dbpass.""" from kittysploit import from...

vLLM OpenAI-Compatible API - Unauthenticated Exposure Detection

Detects a vLLM inference server exposing its OpenAI-compatible API without authentication. The /v1/models endpoint returns the list of served models and is reachable by any unauthenticated client, allowing model enumeration and unauthorized inference resource abuse / cost and information exposure...

Let's Encrypt - Cross-Site Scripting Detection

Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL certificates. !/usr/bin/env python3 -- coding: utf-8 -- """Let's Encrypt contains a cross-site scripting vulnerability when using the the ACME protocol to issue SSL cert.""" from kittysploit...

Tianqing Info Leak Detection

Information exposed in Tianqing. !/usr/bin/env python3 -- coding: utf-8 -- """Information exposed in Tianqing.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tianqing Info Leak Detection', 'description': 'Informatio...

Zimbra Collaboration - Unrestricted File Upload Detection

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

PowerChute Network Shutdown Panel - Detect

Detects PowerChute Network Shutdown Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PowerChute Network Shutdown Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerChute Network...

PrNET FTP Service - Detect

PrNET FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrNET FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'PrNET FTP Service - Detect',...

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal Detection

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """There is a Directory traversal...

WordPress Installer Log Detection

This file is generated during the installation process of wordpress and is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """This file is generated during the installation process of wordpress and is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import...

XiongMai uc-httpd 1.0.0 - Buffer Overflow Detection

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. !/usr/bin/env python3 -- coding: utf-8 -- """Buffer overflow in XiongMai uc-httpd 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Yachtcontrol Webapplication 1.0 - Remote Command Injection Detection

Yachtcontrol Webapplication 1.0 makes it possible to perform direct operating system commands as an unauthenticated user via the "/pages/systemcall.php?command=COMMAND" page and parameter, where COMMAND will be executed and returning the results to the client. Affects Yachtcontrol webservers...

UnRaid <=6.80 - Remote Code Execution Detection

UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. !/usr/bin/env python3 -- coding: utf-8 -- """UnRaid =6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UnRaid =6.80 - Remote Code...

Ivanti EPM Cloud Services Appliance Code Injection Detection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...

Apache ActiveMQ Exposure Detection

An Apache ActiveMQ implementation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache ActiveMQ implementation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache ActiveMQ Exposur...

Cisco RV132W/RV134W Router - Information Disclosure Detection

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information. !/usr/bin/env...

D-Link DIR-600M - Authentication Bypass Detection

D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-600M...

D-Link DNS-320 - Remote Code Execution Detection

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. !/usr/bin/env python3 -- coding: utf-8 -- """The loginmgr.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'D-Link...

NETGEAR - Authentication Bypass Detection

NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers are vulnerable to authentication bypass vulnerabilities which could allow network-adjacent attackers to bypass authentication on affected installations...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

YeaLink DM 3.6.0.20 - Remote Command Injection Detection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Yealink Device Management DM 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Zyxel - Authentication Bypass Detection

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) Detection

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cgi-bin/xmlstatus.""" import re from kittysploit import from lib.protocols.http.httpclient...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization Detection

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

ASUS DSL-AC88U - Authentication Bypass Detection

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Fortinet FortiWeb - SQL Injection Detection

An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability CWE-89 in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests. !/usr/bin/env python3 -- coding: utf-8 -- """An improper...

Generic Database File - Exposure Detection

This is collection of some web frameworks recommendation or default configuration for SQLite database file location. If this file is publicly accessible due to server misconfiguration, it could result in application data leak including users sensitive data, password hashes etc. !/usr/bin/env...