HP LaserJet Professional Panel - Detect

HP LaserJet Professional panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP LaserJet Professional panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP LaserJet Professional Panel -...

Jellyfin Public Users - Exposure Detection

The Jellyfin media server exposed user information via the public users API endpoint. This endpoint could have leaked sensitive data including usernames, user IDs, server IDs, administrator status, password configuration, login activity, and user policies without authentication. !/usr/bin/env...

JavaMelody Monitoring Exposed Detection

JavaMelody is a tool used to monitor Java or Java EE applications in QA and production environments. JavaMelody was detected on this web application. One option in the dashboard is to "View http sessions". This can be used by an attacker to steal a user's session. !/usr/bin/env python3 -- coding:...

Jan AI - Detect

Detects the Jan AI local server, an open-source ChatGPT alternative that runs models locally and exposes a Cortex-powered, OpenAI-compatible API default port 1337. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the Jan AI local server, an open-source ChatGPT alternative that runs models...

Guardfile Config - Detect

Guardfile configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Guardfile configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Guardfile Config -...

Notion Detect

Detects Notion Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Notion Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Notion Detect', 'description': 'Detects Notion Detect.', 'author': 'KittySplo...

Graphql Gqlgen Detect

Detects Graphql Gqlgen Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Gqlgen Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Gqlgen Detect', 'description': 'Detects Graphql Gqlge...

Glances Unauthenticated Panel Detection

Glance running web server mode & Unauthenticated leads system monitoring to info disclosure !/usr/bin/env python3 -- coding: utf-8 -- """Glance running web server mode & Unauthenticated leads system monitoring to info disclosure.""" from kittysploit import from lib.protocols.http.httpclient impor...

WordPress Aspose PDF Exporter - Local File Inclusion Detection

WordPress Aspose PDF Exporter is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose PDF Exporter is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Detection

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 is susceptible to local file inclusion because of insecure handling of a download function that leads to disclosure of internal files due to path traversal with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Franklin...

vRealize Operations Manager API - Server-Side Request Forgery Detection

vRealize Operations Manager API is susceptible to server-side request forgery. A malicious actor with network access to the vRealize Operations Manager API can steal administrative credentials or trigger remote code execution using CVE-2021-21983. !/usr/bin/env python3 -- coding: utf-8 --...

Apache HTTP Server End-of-Life - Detect

Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security update.""" from kittysploit import from...

SkyCaiji - Exposed Installation Detection

SkyCaiji was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """SkyCaiji was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SkyCaiji - Exposed Installation Detection', 'description': 'SkyCaiji was...

Postgres Exporter Metrics Detection

Postgres Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Postgres Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Postgres Exporter Metrics Detection',...

Flow Configuration - Exposure Detection

Detects an exposed Flow configuration file. These files may contain sensitive information such as credentials, internal endpoints, or environment settings. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an exposed Flow configuration file.""" from kittysploit import from...

Metabase Installer - Exposure Detection

Detected Metabase installer page, allowing unauthorized database setup and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Metabase installer page, allowing unauthorized database setup and configuration.""" from kittysploit import from lib.protocols.http.httpclient import...

Beaver Builder Page Builder - Full Path Disclosure Detection

Beaver Builder Page Builder WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Beaver Builder...

Apache Apollo Panel - Detect

Detects Apache Apollo Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Apollo Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Apollo Panel - Detect', 'description':...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Jalios JCMS Login Panel - Detect

Jalios JCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jalios JCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jalios JCMS Login Panel - Detect', 'description...

TP Print FTP Service - Detect

TP Print FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TP Print FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'TP Print FTP Service -...

Elastic Cloud API Key Detection

Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs.""" import re from kittysploit import from...

Landray EIS - SQL Injection Detection

Landray's smart collaboration platform EIS has a very rich collection of modules to meet the needs of organizations and enterprises in knowledge, collaboration, and project management system construction. There is a SQL injection vulnerability in the rptlistreportdefinefield.aspx interface of...

View Yii Debugger Information Detection

Detects potential exposure to Yii Debugger information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects potential exposure to Yii Debugger information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'View Yii...

Crawlab - Arbitrary File Read Detection

Crawlab is vulnerable to arbitrary file read. !/usr/bin/env python3 -- coding: utf-8 -- """Crawlab is vulnerable to arbitrary file read.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crawlab - Arbitrary...

ReCrystallize Server - Authentication Bypass Detection

This vulnerability allows an attacker to bypass authentication in the ReCrystallize Server application by manipulating the 'AdminUsername' cookie. This gives the attacker administrative access to the application's functionality, even when the default password has been changed. !/usr/bin/env pytho...

HTTPBin - Cross-Site Scripting Detection

HTTPBin contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin contains a cross-site scriptin...

Global Traffic Statistics Exposure Detection

Global Traffic Statistics page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Global Traffic Statistics page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Global Traffic Statistics Exposure...

LumisXP - Cross-site Scripting Detection

A cross-site scripting XSS vulnerability in the XsltResultControllerHtml.jsp component of LumisXP v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via the lumPageID parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS vulnerability in the...

Kerio Control v9.2.5 - CRLF Injection Detection

Kerio Control, formerly known as Kerio WinRoute Firewall, has been found vulnerable to multiple HTTP Response Splitting vulnerabilities in product affecting versions 9.2.5 !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Control, formerly known as Kerio WinRoute Firewall, has been found...

SendGrid Env File Exposure Detection

SendGrid file is exposed containing environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """SendGrid file is exposed containing environment variables.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Quick Event Manager < 9.7.5 - Cross-Site Scripting Detection

The Quick Event Manager WordPress Plugin, version 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qemajaxcalendar' action. !/usr/bin/env python3 -- coding: utf-8 -- """The Quick Event Manager WordPress Plugin, version 9.""" from kittysploit...

Symfony Profiler - Remote Access via Injected Arguments Detection

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

Mako Runtime Error - Page Detection

Detects Mako Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Mako Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mako Runtime Error - Page Detection', 'description':...

Magento Unprotected development files Detection

Magento version 1.9.2.x includes /dev directories or files that might reveal your passwords and other sensitive information. The /dev directories and files are not protected by default. According to Magento, "these tests are not supposed to end up on production servers". !/usr/bin/env python3 --...

Cloudflare Speedtest - Detect

Detected the exposed default page of the Cloudflare Speedtest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the Cloudflare Speedtest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Named Process Exporter Detection

Named process exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Named process exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Named Process Exporter Detection', 'description':...

Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 --...

VMware Workspace ONE UEM Airwatch Login Panel - Detect

VMware Workspace ONE UEM Airwatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Drone - Configuration Detection

Drone configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Drone configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone - Configuration Detection', 'description':...

HP iLO Serial Key - Detect

HP iLO serial key was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP iLO serial key was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Serial Key - Detect', 'description': 'HP iLO serial...

iTop - User Enumeration via REST Endpoint Detection

From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is doresetpwd, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided. !/usr/bin/env python3 -- coding: utf-8 --...

Python Django Admin Login Panel - Detect

Python Django admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Python Django admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Django Admin Login Panel...

FLR Blocks <= 1.0.7 - Privilege Escalation

Unauthenticated attackers can change the administrator email via flrblocksusersettingsupdatehandle AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Frontend Login and Registration Blocks - Privilege Escalation""" import secrets from kittysploit import from...

MySQLDumper 1.24.4 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure Detection

Exposed debug log in AffiliateWP Wordpress Plugin !/usr/bin/env python3 -- coding: utf-8 -- """Exposed debug log in AffiliateWP Wordpress Plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Plugin...

WebCTRL OEM <= 6.5 - Cross-Site Scripting Detection

WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login portal does not sanitize the operatorlocale GET parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WebCTRL OEM 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Node-RED Dashboard - Detect

Node-RED dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Node-RED dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node-RED Dashboard - Detect', 'description': 'Node-RED...

Uniview NVR301-04S2-P4 - Cross-Site Scripting Detection

Uniview NVR301-04S2-P4 contains a reflected cross-site scripting vulnerability via the PATH of LAPI. CISA and Uniview state that this vulnerability needs to be authenticated. This is incorrect. Any PATH payload can cause XSS. A submission to Mitre has been sent to update the verbiage in the findi...

Seq Dashboard - Unauthenticated Detection

Seq is exposed without authentication !/usr/bin/env python3 -- coding: utf-8 -- """Seq is exposed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seq Dashboard - Unauthenticated Detection',...