Django Debug Page - Cross-Site Scripting Detection

Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5 has HTML autoescaping disabled in a portion of the template for the technical 500 debug page. We detected that right circumstances DEBUG=True are present to allow a cross-site scripting attack. !/usr/bin/env python3 -- coding: utf-8 -- """Djang...

Pallets Werkzeug <0.15.5 - Local File Inclusion Detection

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. !/usr/bin/env python3 -- coding: utf-8 -- """Pallets Werkzeug before 0.""" from kittysploit import from lib.protocols.http.httpclient import...

WordPress CTHthemes - Cross-Site Scripting Detection

WordPress CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes contain reflected cross-site scripting vulnerabilities via a search query. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress CTHthemes CityBook before 2.""" from kittysploit import from...

LimeSurvey 4.1.11 - Local File Inclusion Detection

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 4.""" import re from kittysploit import from...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion Detection

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. !/usr/bin/env python3 -- coding: utf-8 -- """Media Library...

WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure Detection

WAVLINK WN530H4 M30H4.V5030.190403 contains an information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint. This can allow an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication...

Citrix XenMobile Server - Local File Inclusion Detection

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference: -...

Accela Civic Platform <=21.1 - Cross-Site Scripting Detection

Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via ssoAdapter/logoutAction.do successURL. !/usr/bin/env python3 -- coding: utf-8 -- """Accela Civic Platform through 21.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

phpfastcache - phpinfo Resource Exposure Detection

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. !/usr/bin/env python3 -- coding: utf-8 -- """phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastc.""" from kittysploit import...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection Detection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

CentOS Web Panel - OS Command Injection Detection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. !/usr/bin/env python3 -- coding: utf-8 -- """The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability...

EyouCMS 1.5.4 Open Redirect Detection

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Amprion Grid Loss Login Panel - Detect

Amprion Grid Loss login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Amprion Grid Loss login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amprion Grid Loss Login Panel -...

Apache Hertzbeat - Detect

Detects a Apache Hertzbeat web application is in use, that is a real-time monitoring system with agentless, performance cluster, prometheus-compatible, custom monitoring and status page building capabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Hertzbeat web application ...

Apache HTTP Server End-of-Life - Detect

Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache HTTP Server versions that have reached End-of-Life EOL and no longer receive security update.""" from kittysploit import from...

Archibus Web Central Login - Panel Detect

Archibus Web Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Archibus Web Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Archibus Web Central Login -...

DigitalOcean Key Exposure via Axiom Detection

Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments. !/usr/bin/env python3 -- coding: utf-8 -- """Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments.""" from kittysploit import from lib.protocols.http.httpclient...

Bash Configuration - Exposure Detection

Detected exposed bash configuration on web servers that could have contained sensitive information such as credentials, API keys, database connection strings, or internal paths. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed bash configuration on web servers that could have contain...

BMC Discovery Login Panel - Detect

BMC Discovery login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Login Panel - Detect',...

BSPHP - Information Disclosure Detection

Information disclosure in BSPHP Pro causing user and unauth IP disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Information disclosure in BSPHP Pro causing user and unauth IP disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Concrete5 Detection

An instance running Concrete5 is detected by looking for specific HTTP headers, HTML tags, and known endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running Concrete5 is detected by looking for specific HTTP headers, HTML tags, and known endpoints.""" from kittysploit import...

cPanel Backup Exclusion Configuration - Exposure Detection

cPanel backup exclusion configuration file cpbackup-exclude.conf was publicly accessible, potentially exposing directory structure and system paths. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel backup exclusion configuration file cpbackup-exclude.""" from kittysploit import from...

Dahua Smart Park Management Platform - Arbitary File Read Detection

Dahua Smart Park Management Platform is vulnerable to Local File Inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua Smart Park Management Platform is vulnerable to Local File Inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

XVR Login Panel - Detect

XVR login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """XVR login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XVR Login Panel - Detect', 'description': 'XVR login panel was...

Joomla! Component JInventory 1.23.02 - Local File Inclusion Detection

A directory traversal vulnerability in jinventory.php in the JInventory comjinventory component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python...

WordPress Javo Spot Premium Theme - Unauthenticated Directory Traversal Detection

WordPress Javo Spot Premium Theme wp-config was discovered via local file inclusion. This file is remotely accessible and its content available for reading. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Javo Spot Premium Theme wp-config was discovered via local file inclusion.""" from...

TitanNit Web Control - Exposure Detection

Detects TitanNit Web Control - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects TitanNit Web Control - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TitanNit Web Control - Exposure Detection...

Joomla! Component SVMap 1.1.1 - Local File Inclusion Detection

A directory traversal vulnerability in the SVMap comsvmap component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the SVMap comsvmap...

Apache Spark Environment - Exposure Detection

Detected Apache Spark Web UI exposed environment variables and application information without authentication, potentially revealing sensitive configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache Spark Web UI exposed environment variables and application information...

Jolokia file write to RCE jfr Detection

File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticCommand/jfrStart !/usr/bin/env python3 -- coding: utf-8 -- """File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticComman.""" from kittysploit...

Drupal - Remote Code Execution Detection

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal before 7.""" impor...

GL.iNET SSID Key Disclosure Detection

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on GL.""" from kittysploit import from lib.protocols.http.httpclient import...

Ampache Update Page Exposure Detection

Ampache update page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache update page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Update Page Exposure Detection', 'description':...

Ansible AWX Detection

Detects Ansible AWX Instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ansible AWX Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible AWX Detection', 'description': 'Detects Ansible AWX...

Apache Cocoon detect

Detects Apache Cocoon detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Cocoon detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Cocoon detect', 'description': 'Detects Apache Cocoon...

Asanhamayesh CMS 3.4.6 - Local File Inclusion Detection

Asanhamayesh CMS 3.4.6 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Asanhamayesh CMS 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Asanhamayesh CMS 3.4.6 - Local...

WordPress Aspose Importer & Exporter 1.0 - Local File Inclusion Detection

WordPress Aspose Importer & Exporter version 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose Importer & Exporter version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Android Asset Links Configuration - Detect

The .well-known/assetlinks.json file was found on the target server. This file is used by Android applications to establish verified app-to-web domain associations through the Digital Asset Links protocol. !/usr/bin/env python3 -- coding: utf-8 -- """The .""" from kittysploit import from...

AudioCodes Login - Panel Detect

AudioCodes login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AudioCodes login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AudioCodes Login - Panel Detect', 'description':...

Amazon Web Services S3 Explorer - Detect

Amazon Web Services S3 Explorer page was detected. Page contains links to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon Web Services S3 Explorer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AWS X-Ray Sample Application Detection

AWS X-Ray is a service that helps developers analyze and debug distributed applications. !/usr/bin/env python3 -- coding: utf-8 -- """AWS X-Ray is a service that helps developers analyze and debug distributed applications.""" from kittysploit import from lib.protocols.http.httpclient import...

Azure Instrumentation Key - Exposure Detection

Detected exposed Azure Application Insights Instrumentation Keys classic ikey format in HTTP responses, which allowed anyone to send telemetry data and, in some older configurations, could enable read access via undocumented or legacy APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...

Balada Injector Malware - Detect

Checks websites for Balada Injector malware. !/usr/bin/env python3 -- coding: utf-8 -- """Checks websites for Balada Injector malware.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Balada Injector Malware...

BeyondTrust Login Panel - Detect

BeyondTrust login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BeyondTrust login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BeyondTrust Login Panel - Detect', 'description...

Chatwoot Login Panel - Detect

Chatwoot login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Chatwoot login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chatwoot Login Panel - Detect', 'description': 'Chatwoot logi...

Checkpoint Login Panel - Detect

Checkpoint login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkpoint login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkpoint Login Panel - Detect', 'description':...

Silverlight cross-domain policy Detection

Detects Silverlight cross-domain policy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Silverlight cross-domain policy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Silverlight cross-domain policy Detection...

Commvault Web Console Panel - Detect

Commvault web console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Commvault web console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Commvault Web Console Panel...

Confluence Installation Page - Exposure Detection

Confluence is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Confluence is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Joomla! Component DW Graph - Local File Inclusion Detection

A directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs comdwgraphs component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...