WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting Detection

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. !/usr/bin/env...

Frigate < 0.13.0 Beta 3 - Cross-Site Scripting Detection

Frigate is an open source network video recorder. Before version 0.13.0 Beta 3, there is a reflected cross-site scripting vulnerability in any API endpoints reliant on the / base path as values provided for the path are not sanitized. Exploiting this vulnerability requires the attacker to both kn...

XWiki < 14.10.14 - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according to a name strategy disabled by default, XWiki starting in version 12.0-rc-1 and prior to versions 12.10.12 and 15.5-rc-1 is vulnerable to a reflecte...

WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure Detection

Jordy Meow Perfect Images Manage Image Sizes, Thumbnails, Replace, Retina versions up to 6.4.5 contain a vulnerability that exposes sensitive information to unauthorized actors, letting attackers access confidential data, exploit requires no specific conditions. !/usr/bin/env python3 -- coding:...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure Detection

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

Thruk 2.40-2 - Cross-Site Scripting Detection

Thruk 2.40-2 contains a cross-site scripting vulnerability via /thruk/cgi-bin/status.cgi?style=combined&title=TITLE in the host or title parameter. An attacker can inject arbitrary JavaScript into status.cgi, leading to a triggered payload when accessed by an authenticated user. !/usr/bin/env...

Rstudio Shiny Server <1.5.16 - Local File Inclusion Detection

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """Rstudio Shiny Server prior to 1.""" import re from kittysploit import from...

KevinLAB BEMS 1.0 - SQL Injection Detection

KevinLAB BEMS 1.0 contains a SQL injection vulnerability. Input passed through inputid POST parameter in /http/index.php is not properly sanitized before being returned to the user or used in SQL queries. An attacker can possibly obtain sensitive information from a database, modify data, and...

Seo Panel 4.8.0 - Cross-Site Scripting Detection

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Seo Panel 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Joomla! ChronoForums 2.0.11 - Local File Inclusion Detection

Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials. !/usr/bin/env python3 -- coding: utf-8 --...

Node RED Dashboard <2.26.2 - Local File Inclusion Detection

NodeRED-Dashboard before 2.26.2 is vulnerable to local file inclusion because it allows uibase/js/..%2f directory traversal to read files. !/usr/bin/env python3 -- coding: utf-8 -- """NodeRED-Dashboard before 2.""" import re from kittysploit import from lib.protocols.http.httpclient import...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection Detection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

VoipMonitor <24.61 - Remote Code Execution Detection

VoipMonitor prior to 24.61 is susceptible to remote code execution vulnerabilities because of its use of user supplied data via its web interface, allowing remote unauthenticated users to trigger a remote PHP code execution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """VoipMonitor...

WebCTRL OEM <= 6.5 - Cross-Site Scripting Detection

WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login portal does not sanitize the operatorlocale GET parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WebCTRL OEM 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Ivanti Avalanche 6.3.2 - Local File Inclusion Detection

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Avalanche 6.""" from kittysploit import from lib.protocols.http.httpclient import...

ffay lanproxy Directory Traversal Detection

ffay lanproxy 0.1 is susceptible to a directory traversal vulnerability that could let attackers read /../conf/config.properties to obtain credentials for a connection to the intranet. !/usr/bin/env python3 -- coding: utf-8 -- """ffay lanproxy 0.""" from kittysploit import from...

White Star Software ProTop - Directory Traversal Detection

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. !/usr/bin/env python3 -- coding:...

ETQ Reliance - Reflected XSS via SQLConverterServlet Detection

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS Detection

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php v2.""" from...

FLR Blocks <= 1.0.7 - Privilege Escalation

Unauthenticated attackers can change the administrator email via flrblocksusersettingsupdatehandle AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Frontend Login and Registration Blocks - Privilege Escalation""" import secrets from kittysploit import from...

MeteoBridge <= 6.1 - Remote Code Execution Detection

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote...

XWiki - HQL Injection Detection

XWiki is vulnerable to Hibernate Query Language HQL injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potential...

Letta 0.7.12 - Remote Code Execution

Unauthenticated RCE via POST /v1/tools/run executing attacker tool sourcecode. !/usr/bin/env python3 -- coding: utf-8 -- """Letta 0.7.12 - Remote Code Execution""" import hashlib import json from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Teleport - Authentication Bypass Detection

Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems. !/usr/bin/env python3 -- coding: utf-8 -- """Teleport versions prior to 17.""" from kittysploit import from...

Discourse OAuth Social Login - Cross-site Scripting

Discourse ", for path in paths...

XWiki REST API - Attachments Disclosure Detection

A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in XWiki's...

dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks Detection

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a remote code execution caused by improper handling in Upload function and maxfilesize parameter in dashuploader components, letting remote attackers execute arbitrary code, exploit requires crafted request. !/usr/bin/env python3 -- coding:...

Glances - Information Disclosure Detection

Glances 4.5.1 contains an information disclosure vulnerability caused by unfiltered exposure of sensitive configuration data via the /api/4/config REST API endpoint, letting remote attackers access credentials, exploit requires API access. !/usr/bin/env python3 -- coding: utf-8 -- """Glances 4.""...

TinaCMS - Path Traversal Detection

TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. !/usr/bin/env python3 -- coding: utf-8 -- """TinaCMS CLI 2.""" from...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA...

WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure Detection

The 3D FlipBook WordPress plugin ≤ v1.16.17 has a vulnerability where an unauthenticated AJAX action fb3dsendposts exposes sensitive data. Attackers can access all flipbook posts—including password-protected content, metadata, PDF URLs, and plugin settings—without authorization. !/usr/bin/env...

Copyparty <=1.18.6 - Cross-Site Scripting Detection

Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting XSS via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser. !/usr/bin/env python3...

N-central - Authentication Bypass Detection

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4. !/usr/bin/env python3 -- coding: utf-8 -- """N-central 2025.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

ATutor < 2.2.1 - Cross Site Scripting Detection

ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ATutor 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

PMB v7.4.6 - Cross-Site Scripting Detection

PMB v7.4.6 allows an attacker to perform a reflected XSS on exportz3950.php via the 'query' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PMB v7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PMB v7.4.6 -...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion Detection

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This...

Citrix Gateway and Citrix ADC - Cross-Site Scripting Detection

Citrix ADC and Citrix Gateway versions before 13.1 and 13.1-45.61, 13.0 and 13.0-90.11, 12.1 and 12.1-65.35 contain a cross-site scripting vulnerability due to improper input validation. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ADC and Citrix Gateway versions before 13.""" from...

Temenos T24 R20 - Cross-Site Scripting Detection

Temenos T24 release 20 contains a reflected cross-site scripting vulnerability via the routineName parameter at genrequest.jsp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

mojoPortal 2.7.0.0 - Cross-Site Scripting Detection

mojoPortal 2.7.0.0 contains a cross-site scripting vulnerability in the FileDialog.aspx component, which can allow an attacker to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters. !/usr/bin/env python3 -- coding: utf-8 -- """mojoPortal 2.""" from...

Joomla! Webservice - Password Disclosure Detection

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in Joomla! 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Quick Event Manager < 9.7.5 - Cross-Site Scripting Detection

The Quick Event Manager WordPress Plugin, version 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qemajaxcalendar' action. !/usr/bin/env python3 -- coding: utf-8 -- """The Quick Event Manager WordPress Plugin, version 9.""" from kittysploit...

Cuppa CMS v1.0 - Local File Inclusion Detection

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. !/usr/bin/env python3 -- coding: utf-8 -- """CuppaCMS v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

ZEROF Web Server 2.0 - Cross-Site Scripting Detection

ZEROF Web Server 2.0 allows /admin.back cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """ZEROF Web Server 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZEROF Web Server 2.0 - Cross-Site Scripti...

ThinVNC - Authentication Bypass Detection

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution. !/usr/bin/env python3 -- coding: utf-8 -- """ThinVNC version 1.""" from kittysploit import from...

ResourceSpace - Metadata Export Detection

In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value. !/usr/bin/env python3 -- coding: utf-8 -- """In Montala ResourceSpace through 9.""" from kittysploit import from lib.protocols.http.httpclient...

Roxy-WI < 6.1.1.0 - Remote Code Execution Detection

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the subprocessexecute function without processing the inputs received from the user in the /app/options.py file. !/usr/bin/env python3 -- coding: utf-8 -- """Roxy-WI before 6.""" import re from...

Complete Online Job Search System 1.0 - Cross-Site Scripting Detection

Complete Online Job Search System 1.0 contains a cross-site scripting vulnerability via index.php?q=advancesearch. !/usr/bin/env python3 -- coding: utf-8 -- """Complete Online Job Search System 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Lin CMS Spring Boot - Default JWT Token Detection

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. !/usr/bin/env python3 -- coding: utf-8 -- """An access control issue in Lin CMS Spring Boot v0.""" from kittysploit import from...

Microweber <1.3.2 - Cross-Site Scripting Detection

Code Injection in on search.php?keywords= GitHub repository microweber/microweber prior to 1.3.2. !/usr/bin/env python3 -- coding: utf-8 -- """Code Injection in on search.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name...

LearnPress Plugin < 4.2.0 - Local File Inclusion Detection

Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin = 4.1.7.3.2 versions. !/usr/bin/env python3 -- coding: utf-8 -- """Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin = 4.""" import re from kittysploit import from lib.protocols.http.httpclient import...