WordPress Popup Plugin Directory Listing Detection

Searches for sensitive directories present in the wordpress-popup plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the wordpress-popup plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

LearnPress < 4.2.7.4 - Course Material - Information Disclosure Detection

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 --...

D-Link DIR-615 - Unauthorized Access Detection

D-Link DIR-615 devices with firmware 20.06 are susceptible to unauthorized access. An attacker can access the WAN configuration page wan.htm without authentication, which can lead to disclosure of WAN settings, data modification, and/or other unauthorized operations. !/usr/bin/env python3 --...

WP Responsive Images <= 1.0 - Arbitrary File Read Detection

WP Responsive Images plugin for WordPress = 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """WP Responsive Images plugin for WordPress = 1.""" fr...

Gradio - Server Side Request Forgery Detection

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

Microweber < 1.2.17 - Cross-Site Scripting Detection

Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter.""" from kittysploit import from...

mooDating 1.2 - Cross-site scripting Detection

A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is...

XWiki >= 3.4-milestone-1 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the deletespace template to perform a XSS, e.g. by using URL such as:...

Riello Netman 204 - SQL Injection Detection

The three endpoints /cgi-bin/dbdatalogw.cgi, /cgi-bin/dbeventlogw.cgi, and /cgi-bin/dbmultimetrw.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way. !/usr/bin/env python3 -- coding: utf-8 -- """The three...

ESPHome - Authentication Bypass Detection

ESPHome 2025.8.0 contains an authentication bypass caused by improper validation of base64-encoded Authorization values in the webserver component, letting attackers access functionality without valid credentials, exploit requires crafted Authorization header. !/usr/bin/env python3 -- coding: utf...

X-Recruiting Header Detection

Websites that advertise jobs via HTTP headers !/usr/bin/env python3 -- coding: utf-8 -- """Websites that advertise jobs via HTTP headers.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'X-Recruiting Header Detection'...

Mastodon - Open Redirect Detection

Mastodon version 4.5.8, 4.4.15, 4.3.21 is vulnerable to unauthenticated Open Redirect vulnerability CWE-601 exists in the /web/ route due to improper handling of URL-encoded path segments. !/usr/bin/env python3 -- coding: utf-8 -- """Mastodon version 4.""" import re from kittysploit import from...

Windows Remote Desktop Protocol - Detect

Windows Remote Desktop Protocol was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Windows Remote Desktop Protocol was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Ivanti Incapptic Connect Panel - Detect

Ivanti Incapptic Connect panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Incapptic Connect panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info...

SpiderFoot Login Panel - Detect

SpiderFoot login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SpiderFoot login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpiderFoot Login Panel - Detect', 'description':...

B2BBuilder Detect

Detects B2BBuilder Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects B2BBuilder Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'B2BBuilder Detect', 'description': 'Detects B2BBuilder Detect.',...

Cakefile - Exposure Detection

Detected CoffeeScript Cakefile was exposing build tasks and project structure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected CoffeeScript Cakefile was exposing build tasks and project structure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress ManageWP Worker - Full Path Disclosure Detection

WordPress ManageWP Worker plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress ManageWP Worker plugin files are publicly accessible...

Faraday Login Panel - Detect

Faraday login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Faraday login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Faraday Login Panel - Detect', 'description': 'Faraday...

ICTBroadcast Installation Wizard Detection

ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """ICTBroadcast is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

SeedDMS Login Panel - Detect

SeedDMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SeedDMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SeedDMS Login Panel - Detect', 'description': 'SeedDMS...

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Spring Boot Scheduledtasks Actuator Panel - Detect

Spring Boot Scheduledtasks Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Scheduledtasks Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...

Mongoose - NoSQL Injection Detection

NoSQL injection vulnerability in Mongoose 8.9.5 affecting the populate function's match option. This vulnerability exists due to an incomplete fix for CVE-2024-53900. While direct $where injection is blocked, attackers can bypass this protection by nesting $where operators within logical operator...

UnRaid <=6.80 - Remote Code Execution Detection

UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. !/usr/bin/env python3 -- coding: utf-8 -- """UnRaid =6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UnRaid =6.80 - Remote Code...

Persis Panel - Detect

Persis panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """Persis panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Persis Panel - Detect', 'description': 'Persis panel was detected,',...

Vidyo Admin Login Panel - Detect

Vidyo admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vidyo admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vidyo Admin Login Panel - Detect', 'description...

Content Central Login Panel - Detect

Content Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Content Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Content Central Login Panel - Detect',...

S3CMD Configuration - Detect

S3CMD configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """S3CMD configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'S3CMD Configuration - Detect',...

CloudPanel Login - Detect

Detects CloudPanel Login - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CloudPanel Login - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CloudPanel Login - Detect', 'description': 'Detects...

Sophos Web Appliance Detection

Detects Sophos Web Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sophos Web Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Web Appliance Detection', 'description': 'Detects Sophos...

WoWonder Installation Page - Exposure Detection

Detects exposed WoWonder installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed WoWonder installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WoWonder Installation Page - Exposu...

Langflow AI - Unauthenticated Remote Code Execution

Langflow 1.3.0 code injection via /api/v1/validate/code allows unauthenticated RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Langflow AI - Unauthenticated Remote Code Execution""" import json import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

VMware Carbon Black EDR Panel - Detect

VMware Carbon Black EDR panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Carbon Black EDR panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Carbon Black EDR Panel -...

WordPress Google Analytics - Full Path Disclosure Detection

Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially revealing analytics data, file paths, and errors. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Google Analytics Dashboard Plugin for WordPress by MonsterInsights, potentially...

ThinkCMF Panel - Detect

ThinkCMF panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkCMF panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ThinkCMF Panel - Detect', 'description': 'ThinkCMF panel was...

dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks Detection

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a remote code execution caused by improper handling in Upload function and maxfilesize parameter in dashuploader components, letting remote attackers execute arbitrary code, exploit requires crafted request. !/usr/bin/env python3 -- coding:...

EMS Web Client Login Panel - Detect

EMS Web Client login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EMS Web Client login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EMS Web Client Login Panel - Detect',...

Joomla! Component BeeHeard 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

AEM QueryBuilder JSON Exposure - Bypass Detection

Adobe Experience Manager QueryBuilder endpoint allows unauthenticated attackers to extract sensitive user repository data, including password hashes from the rep:password field in /home/users. This vulnerability bypasses access controls and exposes bcrypt/SHA-256 password hashes through the...

Thruk 2.40-2 - Cross-Site Scripting Detection

Thruk 2.40-2 contains a cross-site scripting vulnerability via /thruk/cgi-bin/status.cgi?style=combined&title=TITLE in the host or title parameter. An attacker can inject arbitrary JavaScript into status.cgi, leading to a triggered payload when accessed by an authenticated user. !/usr/bin/env...

Apache Zeppelin detect

Detects Apache Zeppelin detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Zeppelin detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Zeppelin detect', 'description': 'Detects Apache...

TIBCO Spotfire Statistics Services - Detect

TIBCO Spotfire Statistics Services was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TIBCO Spotfire Statistics Services was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TIBCO Spotfire Statistics...

Etcd Version - Detect

Template detects Etcd version. !/usr/bin/env python3 -- coding: utf-8 -- """Template detects Etcd version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etcd Version - Detect', 'description': 'Template detects Etcd...

OfficeKeeper Admin Login Panel - Detect

OfficeKeeper admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OfficeKeeper admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OfficeKeeper Admin Login Panel -...

Kubernetes Kustomize Configuration - Detect

Kubernetes Kustomize configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Kustomize configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Kustomize...

Docmosis Tornado Server Exposure Detection

Docmosis Tornado Server is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Docmosis Tornado Server is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docmosis Tornado Server Exposure Detection',...

Noptin < 1.6.5 - Open Redirect Detection

Noptin 1.6.5 is susceptible to an open redirect vulnerability. The plugin does not validate the "to" parameter before redirecting the user to its given value, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """Noptin 1.""" import re from kittysploit import from...

Detect Dell iDRAC7

Detected The Integrated Dell Remote Access Controller, iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected The Integrated Dell Remote Access...

WordPress DZS-VideoGallery Plugin Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 swfloc or 2 designrand parameter. !/usr/bin/env python3 -- coding: utf-8 --...