HP Service Manager Login Panel - Detect

HP Service Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP Service Manager login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP Service Manager Logi...

CMSimple 3.1 - Local File Inclusion Detection

CMSimple 3.1 is susceptible to local file inclusion via cmsimple/cms.php when registerglobals is enabled which allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including...

LearnPress < 4.3.2 - Broken Access Control Detection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders...

HCM Cloud - Arbitrary File Read Detection

HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """HCM-Cloud professional human resources platform in the cloud download Arbitrary file read vulnerability.""" import re from kittysploit import from...

twitter-server Cross-Site Scripting Detection

twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala. !/usr/bin/env python3 -- coding: utf-8 -- """twitter-serve...

Pterodactyl game server - Panel Detection

Detects Pterodactyl game server management panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pterodactyl game server management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pterodactyl game server...

Nortek Linear eMerge Panel - Detect

Nortek Linear eMerge panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nortek Linear eMerge panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nortek Linear eMerge Panel -...

WordPress Integrator 1.32 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

SureTriggers <= 1.0.78 - Authentication Bypass

Unauthenticated admin user creation via sure-triggers automation action when secretkey empty. !/usr/bin/env python3 -- coding: utf-8 -- """SureTriggers = 1.0.78 - Authentication Bypass""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Cisco Secure Desktop Installation Panel - Detect

Cisco Secure Desktop installation panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Secure Desktop installation panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Secure...

CirCarLife <4.3 - Improper Authentication Detection

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

LaunchDarkly - Detect

Detects the presence of LaunchDarkly, a feature management and feature flag platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of LaunchDarkly, a feature management and feature flag platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Cloudflare Transform via URL - Image Injection Detection

Transform via URL feature in Cloudflare allow attackers to show arbitrary images to the visitor of a crafted URL on the website. This can be used to perform various attacks such as phishing, defacement, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Transform via URL feature in Cloudflare allo...

Eclipse Theia IDE Panel - Detect

Detected Eclipse Theia IDE panel was exposed. Theia is an extensible platform for multi-language Cloud and Desktop IDEs. Exposed panels may have allowed unauthenticated access to development environments and terminal. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Eclipse Theia IDE panel w...

FetchFile Servlet - Path Traversal Detection (CVE-2016-6601)

Detects CVE-2016-6601 by reading /etc/passwd or conf/securitydbData.xml via /servlets/FetchFile?fileName=. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple vendors /servlets/FetchFile path traversal CVE-2016-6601.""" import re from kittysploit import from lib.protocols.http.httpclient import...

SAPControl ListConfigFiles - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the ListConfigFiles web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

WordPress Simple Image Manipulator < 1.0 - Local File Inclusion Detection

WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Image...

ManageEngine Firewall Analyzer <8.0 - Local File Inclusion Detection

ManageEngine Firewall Analyzer before 8.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine Firewall Analyzer before 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Neobox Web Server Login Panel - Detect

Neobox Web Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Neobox Web Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Neobox Web Server Login Panel -...

SysAid Help Desk <15.2 - Local File Inclusion Detection

SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...

DbGate Web Client Management - Panel Detect

The DbGate Web Client Management Panel is detected on the target system. !/usr/bin/env python3 -- coding: utf-8 -- """The DbGate Web Client Management Panel is detected on the target system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NcFTPd Service - Detect

NcFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NcFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'NcFTPd Service - Detect',...

Sonicwall - Pre-Authentication Arbitrary File Read Detection

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...

Eyou E-Mail <3.6 - Remote Code Execution Detection

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/iploginset/diploginget.php via the getloginipconfigfile function. !/usr/bin/env python3 -- coding: utf-8 -- """Eyou Mail System before 3.""" import re...

Java-springboot-codebase 1.1 - Arbitrary File Read Detection

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

SqWebMail Login Panel - Detect

SqWebMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SqWebMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SqWebMail Login Panel - Detect', 'description':...

Commvault CommCell - Local File Inclusion Detection

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. !/usr/bin/env python3 -- coding: utf-8 --...

SAP Logon Error Message Detection

Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code.""" from kittysploit import from...

Cockpit - Cross-Site Scripting Detection

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import...

DedeCMS v5.7.111 - Cross-Site Scripting Detection

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php. !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS v5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Atlassian Jira Confluence - Cross-Site Scripting Detection

Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...

Cisco Email Security Appliance - Panel Detection

Detected Cisco Email Security Appliance login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Cisco Email Security Appliance login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Email...

GilaCMS Detect

Detects GilaCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GilaCMS Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GilaCMS Detect', 'description': 'Detects GilaCMS Detect.', 'author':...

WAVLINK - Access Control Detection

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

OX Appsuite - Cross-Site Scripting Detection

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. !/usr/bin/env python3 -- coding: utf-8 -- """OX App Suite through 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

PlantUMLServer - Detect

PlantUMLServer is an open-source web application that renders UML diagrams from textual descriptions. It provides a web interface for the PlantUML diagram generation tool, allowing users to create various types of diagrams including class diagrams, sequence diagrams, and activity diagrams through...

Detect Basic uPNP Device

uPNP Device was detected. !/usr/bin/env python3 -- coding: utf-8 -- """uPNP Device was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Basic uPNP Device', 'description': 'uPNP Device was detected.',...

eG Manager Detect

Detects eG Manager Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects eG Manager Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eG Manager Detect', 'description': 'Detects eG Manager Detect.',...

WordPress Events Calendar 6.8.2.1 - Information Disclosure Detection

The Events Calendar WordPress plugin 6.8.2.1 contains missing access checks in the REST API, letting unauthenticated users access information about password protected events, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The Events Calendar WordPress plugin 6.""...

EXPN Mail Server Detect

The "EXPN" can be used by attackers to learn about valid usernames on the target system. On some SMTP servers, EXPN can be used to show the subscribers of a mailing list subscription lists are generally considered to be sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """The "EXPN...

Apache Kafka Broker Detection

Detects Kafka brokers by sending an ApiVersions request on TCP 9092. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Apache Kafka brokers via ApiVersions on TCP 9092.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.kafka.detectors...

EOS HTTP Browser Detection

Detects EOS HTTP Browser. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EOS HTTP Browser.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EOS HTTP Browser Detection', 'description': 'Detects EOS HTTP Browser.'...

Zentral Panel - Detect

Zentral panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zentral panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zentral Panel - Detect', 'description': 'Zentral panel was...

MongoDB Information - Detect

MongoDB build and server information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MongoDB build and server information was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion Detection

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass Detection

Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x are vulnerable to authentication bypass. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the...

MasterSAM Star Gate v11 - Local File Inclusion Detection

MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of sensitive information...

BlogEngine.NET 3.3.7.0 - Local File Inclusion Detection

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter !/usr/bin/env python3 -- coding: utf-8 -- """BlogEngine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Racksnet Login Panel - Detect

Racksnet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Racksnet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Racksnet Login Panel - Detect', 'description':...

Authentik Panel Detection

Detects Authentik identity provider / SSO panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Authentik SSO panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Authentik Panel Detection", "description":...