Oracle Access Management Login Panel - Detect

Oracle Access Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle Access Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle Access...

WordPress Astra Sites - Full Path Disclosure Detection

WordPress Starter Templates plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Starter Templates plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Custom Post Type UI - Full Path Disclosure Detection

Detected WordPress Custom Post Type UI exposes internal file system path through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Custom Post Type UI exposes internal file system path through direct file access.""" from kittysploit import from...

Casdoor get-users Account Password Disclosure Detection

Casdoor get-users Account Password is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor get-users Account Password is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Casdoor get-users Account...

SoftEther VPN Panel - Detect

SoftEther VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SoftEther VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SoftEther VPN Panel - Detect', 'description': 'SoftEthe...

Linkerd Panel - Detect

Linkerd panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Linkerd panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linkerd Panel - Detect', 'description': 'Linkerd panel was...

Application Management Panel - Detect

Application Management Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Application Management Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Application Management Panel - Detect...

LoLLMS WebUI - Detect

An instance running LoLLMS WebUI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LoLLMS WebUI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LoLLMS WebUI - Detect',...

Grav Register Admin User - Detect

Exposed Grav admin user register page. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Grav admin user register page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grav Register Admin User - Detect',...

MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access Detection

The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication !/usr/bin/env python3 -- coding: utf-8 -- """The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication.""" from kittysploit import from...

WordPress Easy WP SMTP - Log Exposure Detection

Detected WordPress Easy WP SMTP plugin debug log file exposed via directory listing, potentially revealing sensitive email contents including password reset links. !/usr/bin/env python3 -- coding: utf-8 -- """Detected WordPress Easy WP SMTP plugin debug log file exposed via directory listing,...

FreePBX - CVE-2025-57819 Backdoor Detection

FreePBX backdoor cleanup script used in 0-day exploitation of CVE-2025-57819 was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX backdoor cleanup script used in 0-day exploitation of CVE-2025-57819 was detected.""" from kittysploit import from lib.protocols.http.httpclient import...

LearnPress < 4.3.7 - Information Disclosure Detection

LearnPress WordPress plugin 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """LearnPres...

YesWiki Bazar Widget - Reflected XSS via 'id' Parameter Detection

YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. striptags does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki...

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting Detection

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. !/usr/bin/env python3 -- coding: utf-8 -- """Lyrion Music Server 9.""" from...

WordPress Product Slider Pro - Supply Chain Backdoor RCE

Compromised Product Slider Pro builds execute attacker-controlled expressions via X-Cache-Status/X-Cache-Key headers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Product Slider Pro for WooCommerce - Supply Chain Backdoor RCE""" import base64 import secrets from kittysploit import from...

Starlette - Improper Validation of Unsafe Equivalence in Input Detection

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

AEM BG-Servlets Detection

Detects AEM BG-Servlets. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AEM BG-Servlets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AEM BG-Servlets Detection', 'description': 'Detects AEM BG-Servlets.',...

Oracle Peoplesoft - Unauthenticated File Read Detection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Phpmyfaq v3.1.11 - Cross-Site Scripting Detection

Phpmyfaq v3.1.11 is vulnerable to reflected XSS in send2friend because the 'artlang' parameter is not sanitized. !/usr/bin/env python3 -- coding: utf-8 -- """Phpmyfaq v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

WP-Optimize WordPress plugin < 3.2.13 - Cross-Site Scripting Detection

The WP-Optimize WordPress plugin before 3.2.13 and SrbTransLatin WordPress plugin before 2.4.1 are vulnerable to cross-site scripting due to a third-party library that improperly handles HTML character escaping. !/usr/bin/env python3 -- coding: utf-8 -- """The WP-Optimize WordPress plugin before...

MooDating 1.2 - Cross-site scripting Detection

A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. !/usr/bin/env...

mooDating 1.2 - Cross-site scripting Detection

A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is...

OURPHP <= 7.2.0 - Cross Site Scripting Detection

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php. !/usr/bin/env python3 -- coding: utf-8 -- """OURPHP = 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OURPHP = 7.2.0 - Cros...

CyberPower - SQL Injection Detection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.""" from kittysploit import from lib.protocols.http.httpclient import...

NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure Detection

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getitem function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data includi...

Netgear R6850 - Information Disclosure Detection

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the debuginfo.htm page. This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as product model name, WAN connection type, and...

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion Detection

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A Local File inclusion vulnerability in test.""" import re from kittysploit import from...

XWiki >= 13.10.8 - Cross-Site Scripting Detection

Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript.""" from kittysploit import from...

Chamilo Command Injection Detection

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. !/usr/bin/env python3 -- coding: utf-8 -- """A command injection vulnerability in the wsConvertPpt...

Gibbon v25.0.0 - Local File Inclusion Detection

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. !/usr/bin/env python3 -- coding: utf-8 -- """Gibbon v25.""" from kittysploit import from...

Dolibarr Unauthenticated Contacts Database Theft Detection

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in Dolibarr 16 before 16.""...

BlogEngine CMS - Open Redirect Detection

Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect !/usr/bin/env python3 -- coding: utf-8 -- """Blogengine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BlogEngine CMS - Open Redirect...

Openfire Administration Console - Authentication Bypass Detection

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

WAGO - Remote Command Execution Detection

In multiple products of WAGO, a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behavior, Denial of Service, and full system compromise. !/usr/bin/env python3 -- coding: utf-8 -- """In multiple product...

Traggo Server - Local File Inclusion Detection

traggo/server version 0.3.0 is vulnerable to directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """traggo/server version 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traggo Server - Local...

WordPress Canto Plugin <= 3.0.4 - File Inclusion Detection

Canto plugin for WordPress up to version 3.0.4 contains a remote file inclusion caused by the 'wpabspath' parameter, letting unauthenticated attackers include and execute arbitrary remote code if allowurlinclude is enabled, exploit requires allowurlinclude to be enabled. !/usr/bin/env python3 --...

Jeecg P3 Biz Chat - Local File Inclusion Detection

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters. !/usr/bin/env python3 -- coding: utf-8 -- """Jeecg P3 Biz Chat 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Squidex <7.4.0 - Cross-Site Scripting Detection

Squidex before 7.4.0 contains a cross-site scripting vulnerability via the squid.svg endpoint. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 --...

DataEase <= 2.4.1 - Sensitive Information Exposure Detection

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. !/usr/bin/env python3...

aiohttp - Directory Traversal Detection

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route Detection

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

Drawio <18.0.4 - Server-Side Request Forgery Detection

Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Drawio prior to 18.""" from kittysploit import from...

Rudloff alltube prior to 3.0.1 - Open Redirect Detection

An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability...

Wordpress Profile Builder Plugin Cross-Site Scripting Detection

The Profile Builder User Profile & User Registration Forms WordPress plugin is vulnerable to cross-site scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

WordPress Transposh <=1.0.8.1 - Information Disclosure Detection

WordPress Transposh plugin through is susceptible to information disclosure via the AJAX action tphistory, which is intended to return data about who has translated a text given by the token parameter. However, the plugin also returns the user's login name as part of the userlogin attribute. If a...

AudioCodes Device Manager Express - SQL Injection Detection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in AudioCodes Device Manager Express through 7."...

uDraw <3.3.3 - Local File Inclusion Detection

uDraw before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the response. As a result, unauthenticated users...

Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure Detection

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users !/usr/bin/env python3 -- coding: utf-8 -- """The Popup by Supsystic WordPress...