WordPress English Admin <1.5.2 - Open Redirect Detection

WordPress English Admin plugin before 1.5.2 contains an open redirect vulnerability. The plugin does not validate the admincustomlanguagereturnurl before redirecting users to it. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations...

Confluence Installation Page - Exposure Detection

Confluence is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Confluence is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF Detection

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

VMWare Workspace ONE UEM - Server-Side Request Forgery Detection

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain a server-side request forgery vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without...

PraisonAI AgentOS - Information Disclosure Detection

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

Moodle LTI module Reflected - Cross-Site Scripting Detection

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

LVS Lean Value Management System Business - Directory Listing Detection

Multiple systems of Hangzhou Jila Technology Co., Ltd. have been found to have directory traversal vulnerabilities. These vulnerabilities arise from the inadequate access controls implemented in the /Business/ directory. Malicious actors can potentially leverage these vulnerabilities to illicitly...

Sony IPELA Engine IP Camera - Hardcoded Account Detection

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.""" from kittysploit import from...

SteVe - Cross-Site Scripting Detection

SteVe contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 --...

Shoppable Service Auth Token Detection

Detects Shoppable Service Auth Token. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Shoppable Service Auth Token.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Shoppable Service Auth Token Detection',...

node-srv - Local File Inclusion Detection

node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path. !/usr/bin/env python3 -- coding: utf-8 -- """node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a...

Gitea Public Registration Enabled Detection

A misconfiguration in Gitea allows arbitrary users to sign up and read code hosted on the service. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfiguration in Gitea allows arbitrary users to sign up and read code hosted on the service.""" from kittysploit import from...

MemTracker - Exposure Detection

MemTracker was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """MemTracker was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Netsweeper 4.0.9 - Cross-Site Scripting Detection

Netsweeper 4.0.9 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env...

LearnPress < 4.2.7.4 - Course Material - Information Disclosure Detection

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 --...

ASP.NET Core Development Environment - Exposure Detection

The ASP.NET Core application is running in Development mode, which could exposes detailed error messages and stack traces on the '/Error' page. !/usr/bin/env python3 -- coding: utf-8 -- """The ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

WordPress Hummingbird <= 3.18.0 - Sensitive Information Exposure via Log File Detection

Hummingbird Performance WordPress plugin = 3.18.0 contains a sensitive information exposure caused by improper handling in the 'request' function, letting unauthenticated attackers extract sensitive data including Cloudflare API credentials, exploit requires no authentication. !/usr/bin/env pytho...

Netsweeper 4.0.9 - Open Redirect Detection

Netsweeper 4.0.9 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Netsweeper 4.""" import re from kittysploit...

Spring Boot Scheduledtasks Actuator Panel - Detect

Spring Boot Scheduledtasks Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Scheduledtasks Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...

Dgraph <= 25.3.2 - Admin Token Disclosure Detection

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

ZEROF Web Server Detect

Detects ZEROF Web Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ZEROF Web Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZEROF Web Server Detect', 'description': 'Detects ZEROF W...

Wordpress Plugin MStore API Detection

Searches for sensitive directories present in the mstore-api plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the mstore-api plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

CERIO-DT Interface - Command Execution Detection

CERIO DT series routers have an operation command injection vulnerability in specific versions. An attacker could exploit this vulnerability to execute commands. !/usr/bin/env python3 -- coding: utf-8 -- """CERIO DT series routers have an operation command injection vulnerability in specific...

Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting Detection

A cross-site scripting XSS vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS...

Apache Shenyu Gateway Management System - Detect

Detects a Apache Shenyu Gateway Management System, a Java native API Gateway for service proxy, protocol conversion and API governance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Shenyu Gateway Management System, a Java native API Gateway for service proxy, protocol conve."""...

LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization Detection

LottieFiles LottieFiles = 3.0.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers exploit missing authorization, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """LottieFiles...

Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution Detection

Zoho ManageEngine OpManager before 12.5.329 contains a remote code execution caused by a general bypass in the deserialization class, letting unauthenticated attackers execute arbitrary code, exploit requires no authentication !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine OpManag...

ffay lanproxy Directory Traversal Detection

ffay lanproxy 0.1 is susceptible to a directory traversal vulnerability that could let attackers read /../conf/config.properties to obtain credentials for a connection to the intranet. !/usr/bin/env python3 -- coding: utf-8 -- """ffay lanproxy 0.""" from kittysploit import from...

CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

Retool < 3.88 - SVG Cross-Site Scripting Detection

This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Retool. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for SVG Cross-Site ScriptingXSS vulnerability via the Image Proxy URL parameter in Reto.""" from kittysploit import fro...

Gnuboard CMS - Detect

Gnuboard CMS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard CMS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gnuboard CMS - Detect', 'description': 'Gnuboard CMS was detected.',...

Hookbot Rat Panel - Detect

Hookbot panel were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hookbot panel were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hookbot Rat Panel - Detect', 'description': 'Hookbot panel were...

Generic Tokens Detection

Detects likely exposed API tokens or secrets in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detect likely exposed API tokens / secrets in HTML responses.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect Detection

WordPress Newsletter Manager 1.5 is susceptible to an open redirect vulnerability. The plugin used base64 encoded user input in the appurl parameter without validation to redirect users using the header PHP function, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 --...

Brickcom Camera - Unauthenticated Snapshot Access Detection

Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endp.""" from kittysploit impo...

ThingsBoard Panel - Detect

ThingsBoard was detected — a Open-source IoT Platform for device management, data collection, processing and visualization. !/usr/bin/env python3 -- coding: utf-8 -- """ThingsBoard was detected — a Open-source IoT Platform for device management, data collection, processing and v.""" from...

WordPress The Events Calendar - Full Path Disclosure Detection

WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress The Events Calendar plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

Fastify Swagger-UI - Information Disclosure Detection

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route Detection

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

ASP.Net Default Page Detection

Detected default ASP.NET application pages including both traditional and modern versions. !/usr/bin/env python3 -- coding: utf-8 -- """Detected default ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ASP.Net...

Test CGI Script - Detect

Test CGI script was detected. Response page returned by this CGI script exposes a list of server environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Test CGI script was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Encompass CM1 Home Page - Detect

Encompass CM1 home page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Encompass CM1 home page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Encompass CM1 Home Page - Detect', 'description...

Salesforce Tableau Server - Detect

Detects Salesforce Tableau Server and extracts the buildid. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Salesforce Tableau Server and extracts the buildid.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Microweber <1.2.15 - Cross-Site Scripting Detection

Microweber prior to 1.2.15 contains a reflected cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch oth...

Traccar Panel - Detect

Traccar panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Traccar panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traccar Panel - Detect', 'description': 'Traccar panel was...

Citrix Hypervisor Page Detection

Detects Citrix Hypervisor Page Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Citrix Hypervisor Page Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix Hypervisor Page Detection',...

JIRA in HTTPS mode - Open Redirect Detection

Detected Open redirect vulnerability in Jira via osdestination parameter versions 5.2.11, 6.2, and 6.2.2. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Open redirect vulnerability in Jira via osdestination parameter versions 5.""" import re from kittysploit import from...

Sonatype Nexus Repository Manager 3 - Local File Inclusion Detection

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. !/usr/bin/env python3 -- coding: utf-8 -- """Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files.""" import re from...

Ganglia XML Grid Monitor Detection

Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. !/usr/bin/env python3 -- coding: utf-8 -- """Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters an.""" import socket from...