Eaton Intelligent Power Manager 1.6 - Directory Traversal Detection

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Eaton Intelligent Power Manager v1.""" import re from kittysplo...

UnRaid <=6.80 - Remote Code Execution Detection

UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. !/usr/bin/env python3 -- coding: utf-8 -- """UnRaid =6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UnRaid =6.80 - Remote Code...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass Detection

Zyxel NBG2105 V1.00AAGU.2C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NBG2105 V1.""" from kittysploit import from lib.protocols.http.httpclient import...

Ivanti EPM Cloud Services Appliance Code Injection Detection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) Detection

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cgi-bin/xmlstatus.""" import re from kittysploit import from lib.protocols.http.httpclient...

WyreStorm Apollo VX20 - Information Disclosure Detection

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext credentials for the SoftAP access point Router /device/config using an HTTP GET request. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on WyreStorm Apollo VX20...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization Detection

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

ASUS DSL-AC88U - Authentication Bypass Detection

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

TVT DVR Sensitive Device - Information Disclosure Detection

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. !/usr/bin/env pytho...

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

Fortinet FortiWeb - SQL Injection Detection

An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability CWE-89 in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests. !/usr/bin/env python3 -- coding: utf-8 -- """An improper...

Ivanti Connect Secure CVE-2024-21887 Detection

Detects the CVE-2023-46805 auth-bypass path that enables CVE-2024-21887 command injection by reading restricted JSON APIs without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure CVE-2024-21887 surface via CVE-2023-46805 auth bypass.""" from kittysploit import fr...

Avalaunch FTP Service - Detect

Avalaunch FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Avalaunch FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Avalaunch FTP Servic...

Microweber <1.3.2 - Cross-Site Scripting Detection

Code Injection in on search.php?keywords= GitHub repository microweber/microweber prior to 1.3.2. !/usr/bin/env python3 -- coding: utf-8 -- """Code Injection in on search.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name...

WordPress WPForms - Full Path Disclosure Detection

WordPress Plugin WPForms files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin WPForms files are publicly accessible without ABSPATH...

WordPress Core <=6.2 - Directory Traversal Detection

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wplang’ parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.""" from kittysploit import from...

SyncThru Web Service Panel - Detect

SyncThru Web Service panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SyncThru Web Service panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SyncThru Web Service Panel - Detect',...

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI) Detection

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion Detection

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. !/usr/bin/env python3 -- coding: utf-8 -- """Media Library...

Deskpro On-Premise Controller - Default Page Detect

Deskpro On-Premise Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro On-Premise Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro On-Premis...

ReDoc API Docs - Detect

ReDoc API documentation interface is available without authentication, potentially exposing information about the API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """ReDoc API documentation interface is available without authentication, potentially exposing information about .""" from...

Airtame Device Detect

Detects Airtame Device Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Airtame Device Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Airtame Device Detect', 'description': 'Detects Airtame Devic...

Adobe AEM External Link Checker Exposure Detection

Detects Adobe AEM External Link Checker Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Adobe AEM External Link Checker Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM External Link...

ListingPro < 2.6.1 - Sensitive Data Disclosure Detection

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

Icecast Streaming Media Server Detection

Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...

Zyxel Firewall Panel - Detect

Zyxel Firewall panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel Firewall panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zyxel Firewall Panel - Detect', 'description': 'Zyxel...

Geoserver - Server-Side Request Forgery Detection

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...

Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting Detection

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Apache Airflow OS Command Injection Detection

Apache Airflow prior to version 2.2.4 is vulnerable to OS command injection attacks because some example DAGs do not properly sanitize user-provided parameters, making them susceptible to OS Command Injection from the web UI. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Airflow prior to...

mooDating 1.2 - Cross-site scripting Detection

A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is...

Vendure - Arbitrary File Read Detection

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Cleo Technology - Detect

This template detects Cleo technologies, including VLTrader, Harmony, and LexiCom, by inspecting response headers.It also extracts version information for each identified technology. !/usr/bin/env python3 -- coding: utf-8 -- """This template detects Cleo technologies, including VLTrader, Harmony,...

WP-Optimize WordPress plugin < 3.2.13 - Cross-Site Scripting Detection

The WP-Optimize WordPress plugin before 3.2.13 and SrbTransLatin WordPress plugin before 2.4.1 are vulnerable to cross-site scripting due to a third-party library that improperly handles HTML character escaping. !/usr/bin/env python3 -- coding: utf-8 -- """The WP-Optimize WordPress plugin before...

FortiAuthenticator - Detect

The FortiAuthenticator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """The FortiAuthenticator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiAuthenticator - Detect',...

LANDESK(R) Management Agent Detect

Detects LANDESKR Management Agent Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LANDESKR Management Agent Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LANDESKR Management Agent Detect',...

Odoo - Panel Detect

Detects Odoo - Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Odoo - Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Odoo - Panel Detect', 'description': 'Detects Odoo - Panel...

Shopware < 5.5.8 - Cross-Site Scripting Detection

Shopware before 5.5.8 contains a reflected cross-site scripting XSS caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim...

YesWiki Bazar Widget - Reflected XSS via 'id' Parameter Detection

YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. striptags does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki...

Ecology Springframework - Local File Inclusion Detection

Ecology Springframework is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Ecology Springframework is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Thinfinity VirtualUI Panel - Detect

Thinfinity VirtualUI panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Thinfinity VirtualUI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Thinfinity VirtualUI Panel - Detect',...

TitanNit Web Control - Exposure Detection

Detects TitanNit Web Control - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects TitanNit Web Control - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TitanNit Web Control - Exposure Detection...

MyuCMS - Local File Inclusion Detection

MyuCMS is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MyuCMS is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyuCMS - Local File...

Well-Known PKI Validation Directory Detection

Detects CA/B Forum PKI validation artefacts directory. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CA/B Forum PKI validation artefacts directory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known PK...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the flag parameter in menu.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA ERP-NC V5.""" from kittysploit...

Beszel Login Panel - Detect

Beszel products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Beszel products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Beszel Login Panel - Detect', 'description': 'Beszel products w...

Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in joomlaflickr.php in the Joomla! Flickr comjoomlaflickr component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

WordPress ManageWP Worker - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass Detection

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. !/usr/bin/env python3 -...