Cloudflare Speedtest - Detect

Detected the exposed default page of the Cloudflare Speedtest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the Cloudflare Speedtest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Named Process Exporter Detection

Named process exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Named process exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Named Process Exporter Detection', 'description':...

Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 --...

VMware Workspace ONE UEM Airwatch Login Panel - Detect

VMware Workspace ONE UEM Airwatch login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Workspace ONE UEM Airwatch login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Drone - Configuration Detection

Drone configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Drone configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone - Configuration Detection', 'description':...

HP iLO Serial Key - Detect

HP iLO serial key was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP iLO serial key was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Serial Key - Detect', 'description': 'HP iLO serial...

iTop - User Enumeration via REST Endpoint Detection

From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is doresetpwd, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided. !/usr/bin/env python3 -- coding: utf-8 --...

Python Django Admin Login Panel - Detect

Python Django admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Python Django admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Python Django Admin Login Panel...

FLR Blocks <= 1.0.7 - Privilege Escalation

Unauthenticated attackers can change the administrator email via flrblocksusersettingsupdatehandle AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Frontend Login and Registration Blocks - Privilege Escalation""" import secrets from kittysploit import from...

MySQLDumper 1.24.4 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure Detection

Exposed debug log in AffiliateWP Wordpress Plugin !/usr/bin/env python3 -- coding: utf-8 -- """Exposed debug log in AffiliateWP Wordpress Plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Plugin...

WebCTRL OEM <= 6.5 - Cross-Site Scripting Detection

WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login portal does not sanitize the operatorlocale GET parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WebCTRL OEM 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Node-RED Dashboard - Detect

Node-RED dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Node-RED dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node-RED Dashboard - Detect', 'description': 'Node-RED...

Uniview NVR301-04S2-P4 - Cross-Site Scripting Detection

Uniview NVR301-04S2-P4 contains a reflected cross-site scripting vulnerability via the PATH of LAPI. CISA and Uniview state that this vulnerability needs to be authenticated. This is incorrect. Any PATH payload can cause XSS. A submission to Mitre has been sent to update the verbiage in the findi...

Seq Dashboard - Unauthenticated Detection

Seq is exposed without authentication !/usr/bin/env python3 -- coding: utf-8 -- """Seq is exposed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seq Dashboard - Unauthenticated Detection',...

WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to app/view/agenda-widget-form.php; 2 args, 3 title, 4 beforetitle, or 5 aftertitle parameter to...

WordPress Stop Spammers <2021.9 - Cross-Site Scripting Detection

WordPress Stop Spammers plugin before 2021.9 contains a reflected cross-site scripting vulnerability. It does not escape user input when blocking requests such as matching a spam word, thus outputting it in an attribute after sanitizing it to remove HTML tags. !/usr/bin/env python3 -- coding: utf...

WordPress Elementor Plugin Directory Listing Detection

Searches for sensitive directories present in the elementor wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the elementor wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Ajax Search Lite - Full Path Disclosure Detection

WordPress Plugin Ajax Search Lite files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Ajax Search Lite files are publicly accessible...

jotty·page Login - Panel Detect

jotty·page login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """jotty·page login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'jotty·page Login - Panel Detect',...

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE Detection

The plugin does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains. !/usr/bin/env python3 --...

Joomla! Component Property - Local File Inclusion Detection

A directory traversal vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Crontab UI - Dashboard Exposure Detection

Detects Crontab UI - Dashboard Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Crontab UI - Dashboard Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crontab UI - Dashboard Exposure Detection...

Hubble - Detect

Hubble products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hubble products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hubble - Detect', 'description': 'Hubble products was detected....

Action Controller Exception - Page Detection

Detects Action Controller Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Action Controller Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Action Controller Exception - Page...

Cisco WebVPN Panel - Detect

Cisco WebVPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco WebVPN panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco WebVPN Panel - Detect', 'description':...

Symantec PGP Global Directory Panel - Detect

Symantec PGP Global Directory panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec PGP Global Directory panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec PGP Global...

InfluxDB Version Information - Detect

InfluxDB version information check was conducted. !/usr/bin/env python3 -- coding: utf-8 -- """InfluxDB version information check was conducted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'InfluxDB Version...

Umbraco CMS - Directory Listing Exposure Detection

Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing configuration files, logs, backups, and other sensitive data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing...

Rasa Open Source - Detect

Rasa Open Source, an open-source conversational AI framework used to build chatbots and voice assistants that exposes a REST server default port 5005 for intent parsing and webhook-driven conversations, was detected. Exposed unauthenticated instances may have allowed interaction with the...

WS FTP File Disclosure Detection

WSFTP software, which is a popular FTP File Transfer Protocol client used for transferring files between a local computer and a remote server has its log file exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WSFTP software, which is a popular FTP File Transfer Protocol client used for...

NetMRI Unauthenticated SQL Injection via skipjackUsername Detection

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in Infoblox NETMRI before 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Hewlett-Packard FTP Service - Detect

Hewlett-Packard FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett-Packard FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

WordPress Securimage-WP 3.2.4 - Cross-Site Scripting Detection

WordPress Securimage-WP 3.2.4 plugin contains a cross-site scripting vulnerability via siwptest.php. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...

Ivanti Sentry - OS Command Injection Detection

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution !/usr/bin/env python3 -- coding: utf-8 -- """An OS Command Injection vulnerability in Ivanti Sentry before the...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in th...

SeaCMS V6.4.5 RCE Detection

A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in SeaCMS allows remote unauthenticated attackers to execute arbitrary PHP code.""" from kittysploit import from...

Apache NiFi - Unauthenticated Access Detection

Apache NiFi server was able to be accessed because no authentication was required. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi server was able to be accessed because no authentication was required.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Kubernetes Kustomize Configuration - Detect

Kubernetes Kustomize configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Kustomize configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Kustomize...

SAP SuccessFactors Login Panel - Detect

SAP SuccessFactors login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP SuccessFactors login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP SuccessFactors Login Panel -...

Lotus Core CMS 1.0.1 - Local File Inclusion Detection

Lotus Core CMS 1.0.1 allows authenticated local file inclusion of .php files via directory traversal in the index.php pageslug parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Lotus Core CMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Odoo Apps - Cross-Site Scripting via Prototype Pollution Detection

jquery-bbq 1.2.1 contains a prototype pollution caused by improperly controlled modification of object prototype attributes, letting malicious users inject properties into Object.prototype, exploit requires malicious user interaction. !/usr/bin/env python3 -- coding: utf-8 -- """jquery-bbq 1."""...

SaltStack Salt <3002.5 - Auth Bypass Detection

SaltStack Salt before 3002.5 does not honor eauth credentials for the wheelasync client, allowing attackers to remotely run any wheel modules on the master. !/usr/bin/env python3 -- coding: utf-8 -- """SaltStack Salt before 3002.""" from kittysploit import from lib.protocols.http.httpclient impor...

Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure Detection

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users !/usr/bin/env python3 -- coding: utf-8 -- """The Popup by Supsystic WordPress...

Microweber < 1.2.17 - Cross-Site Scripting Detection

Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter.""" from kittysploit import from...

SuperWebMailer 9.31.0.01799 - Cross-Site Scripting Detection

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting XSS vulenrability via the component api.php. !/usr/bin/env python3 -- coding: utf-8 -- """SuperWebMailer v9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Joomla! Component User Status - Local File Inclusion Detection

A directory traversal vulnerability in userstatus.php in the User Status comuserstatus component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

VMware vCenter Converter Panel - Detect

VMware vCenter Converter panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware vCenter Converter panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware vCenter Converter Panel -...

CentOs-WebPanel Test Page Detection

Detects CentOs-WebPanel Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CentOs-WebPanel Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CentOs-WebPanel Test Page Detection', 'description':...

Booked < 2.2.6 - Broken Authentication Detection

The Booked plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions hooked via AJAX actions in versions up to, and including, 2.2.5. This makes it possible for authenticated attackers with subscriber-level permissions and above to execute...