Drupal - Remote Code Execution Detection

Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal 8.""" from kittysploit import from...

Starlette - Improper Validation of Unsafe Equivalence in Input Detection

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

Vite Dev Server - Path Traversal in Optimized Deps .map Handling Detection

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

WebMvc.fn/WebFlux.fn - Path Traversal Detection

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

Web Viewer for Samsung DVR - Detect

Detects Web Viewer for Samsung DVR - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Web Viewer for Samsung DVR - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Web Viewer for Samsung DVR -...

CX Cloud Panel - Detect

CX Cloud panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """CX Cloud panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CX Cloud Panel - Detect', 'description': 'CX Cloud panel was...

Zabbix Login Panel - Detect

Zabbix login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zabbix login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zabbix Login Panel - Detect', 'description': 'Zabbix logi...

Jenkins - Remote Code Execution Detection

Jenkins is susceptible to a remote code execution vulnerability due to accessible script functionality. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins is susceptible to a remote code execution vulnerability due to accessible script functionality.""" from kittysploit import from...

Get Access Token Json Detection

Internal file is exposed in Constant Contact Forms wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Internal file is exposed in Constant Contact Forms wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Oracle Opera Login - Detect

Detects Oracle Opera Login - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Oracle Opera Login - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Opera Login - Detect', 'description':...

XOOPS Installation Page - Exposure Detection

Detects exposed XOOPS Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed XOOPS Installation page.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XOOPS Installation Page -...

Ganglia XML Grid Monitor Detection

Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. !/usr/bin/env python3 -- coding: utf-8 -- """Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters an.""" import socket from...

Ektron CMS Login Panel - Detect

Ektron CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ektron CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ektron CMS Login Panel - Detect', 'description':...

SAP Analytics Cloud Panel - Detect

SAP Analytics Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Analytics Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Analytics Cloud Panel - Detect',...

Nacos 1.x - Authentication Bypass Detection

Nacos 1.x was discovered. A default Nacos instance needs to modify the application.properties configuration file or add the JVM startup variable Dnacos.core.auth.enabled=true to enable the authentication function reference: https://nacos.io/en-us/docs/auth.html. But authentication can still be...

Airtame Device Detect

Detects Airtame Device Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Airtame Device Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Airtame Device Detect', 'description': 'Detects Airtame Devic...

Azure Function App - Default Page Detection

Detects Azure Function App - Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Function App - Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Function App - Default Page...

WordPress Plugin Email Subscribers Listing Detection

Searches for sensitive directories present in the email-subscribers plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the email-subscribers plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Collibra Properties Exposure Detection

Detected exposed Collibra Properties. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Collibra Properties.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Collibra Properties Exposure Detection',...

ONLYOFFICE Login Panel - Detect

ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence. !/usr/bin/env python3 -- coding: utf-8 -- """ONLYOFFICE Community Server is a free open-source collaborative system developed to manage...

IPdiva Mediation Login Panel - Detect

IPdiva Mediation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IPdiva Mediation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IPdiva Mediation Login Panel - Detect...

Teltonika Login Panel - Detect

Teltonika login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Teltonika login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Teltonika Login Panel - Detect',...

CVAT Computer Vision Annotation Tool - Detect

CVAT Computer Vision Annotation Tool was detected. CVAT is a widely used open-source annotation platform for labelling images, video, and 3D point clouds used to train AI/ML computer vision models. !/usr/bin/env python3 -- coding: utf-8 -- """CVAT Computer Vision Annotation Tool was detected."""...

Qualitor ITSM - Detect

Qualitor ITSM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualitor ITSM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualitor ITSM - Detect', 'description':...

NoVus IP Login Panel - Detect

NoVus IP login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NoVus IP login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NoVus IP Login Panel - Detect', 'description': 'NoVus...

Openstack - Infomation Disclosure Detection

Openstack exposing Configuration or settings related to the Swift object storage system. !/usr/bin/env python3 -- coding: utf-8 -- """Openstack exposing Configuration or settings related to the Swift object storage system.""" from kittysploit import from lib.protocols.http.httpclient import...

RIEDEL Artist FTP Service - Detect

RIEDEL Artist FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RIEDEL Artist FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'RIEDEL Artis...

SonicWall Virtual Office SSL VPN Login Panel - Detect

SonicWall Virtual Office SSL VPN login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Virtual Office SSL VPN login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Ulanzi Clock Detect

Ulanzi Clock panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ulanzi Clock panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ulanzi Clock Detect', 'description': 'Ulanzi Clock panel...

ZOHO ManageEngine Applications Manager Panel - Detected

ZOHO ManageEngine panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine Applications Manager Panel -...

GitLab public snippets Detection

Detects GitLab public snippets. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public snippets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public snippets Detection', 'description': 'Detects...

Infoblox NIOS Login Panel - Detect

Infoblox NIOS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Infoblox NIOS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Infoblox NIOS Login Panel - Detect',...

Changedetection.io Panel Detection

Detects Changedetection.io website change monitoring panels. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Changedetection.io panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Changedetection.io Panel...

Sophos Mobile Panel - Detect

Sophos Mobile panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Mobile panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Mobile Panel - Detect', 'description': 'Sophos...

Rollup.js Configuration - Detect

Rollup configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rollup configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rollup.js Configuration - Detect', 'description':...

Zyxel Firewall Panel - Detect

Zyxel Firewall panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel Firewall panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zyxel Firewall Panel - Detect', 'description': 'Zyxel...

Advanced Custom Fields (ACF) - Full Path Disclosure Detection

Advanced Custom Fields ACF for WordPress contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Advanced Custom...

HIKVISION iSecure Center - Remote Code Execution Detection

Hikvision's comprehensive security management platform has a Fastjson remote command execution vulnerability, which can execute system commands and obtain system permissions and sensitive data information of the target server. !/usr/bin/env python3 -- coding: utf-8 -- """Hikvision's comprehensive...

ToolJet Login Panel - Detect

ToolJet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ToolJet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ToolJet Login Panel - Detect', 'description': 'ToolJet...

HugeGraph Studio - Detect

HugeGraph Studio was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HugeGraph Studio was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HugeGraph Studio - Detect', 'description': 'HugeGraph Studio...

WebTrees Exposed Installation Detection

WebTrees is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """WebTrees is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SuperWebMailer 9.31.0.01799 - Cross-Site Scripting Detection

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting XSS vulenrability via the component api.php. !/usr/bin/env python3 -- coding: utf-8 -- """SuperWebMailer v9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Pipfile.lock Disclosure Detection

Detects Pipfile.lock Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pipfile.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipfile.lock Disclosure Detection', 'description': 'Detects Pipfile.lock...

Sercomm VD625 Smart Modems - CRLF Injection Detection

Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT2.1.0 are vulnerable to Carriage Return Line Feed CRLF injection via the Content-Disposition header. !/usr/bin/env python3 -- coding: utf-8 -- """Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT2.""" from kittysploit impo...

Bugzilla - Config Exposed Detection

Because the config.cgi is publicly exposed, it is possible to enumerate main domain and possible users registered on Bugzilla server. !/usr/bin/env python3 -- coding: utf-8 -- """Because the config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

WordPress Meta Box - Full Path Disclosure Detection

The Meta Box – WordPress Custom Fields Framework plugin for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path. !/usr/bin/env python3 -- coding: utf-8 -- """The Meta Box – WordPress Custom Fields Framework plugin...

Froxlor Server Management Login Panel - Detect

Froxlor Server Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Froxlor Server Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Froxlor Server...

Apache JSPWiki - User IP Enumeration Detection

Enumerates the IP Address and users that is currently accessing an Apache JSPWiki web application, leading open source WikiWiki engine, feature-rich and built around standard JEE components Java, servlets, JSP. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerates the IP Address and users that ...

FOSSBilling - Installation Detection

FOSSBilling installation dashboard has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """FOSSBilling installation dashboard has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FOSSBilling -...

Xymon - Exposure Detection

Detected the exposure of the Xymon monitoring system interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposure of the Xymon monitoring system interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...