Magento Server Mass Importer - Cross-Site Scripting Detection

Magento Server Mass Importer plugin contains multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php. !/usr/bin/env python3 -- coding: utf-8 --...

ManageEngine Firewall Analyzer <8.0 - Local File Inclusion Detection

ManageEngine Firewall Analyzer before 8.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine Firewall Analyzer before 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting Detection

Wordpress plugin forget-about-shortcode-buttons 1.1.1 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting Detection

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via mychannel.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Apache S2-032 Struts - Remote Code Execution Detection

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when dynamic method invocation is enabled, allows remote attackers to execute arbitrary code via method: prefix related to chained expressions. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re fr...

Django Debug Page - Cross-Site Scripting Detection

Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5 has HTML autoescaping disabled in a portion of the template for the technical 500 debug page. We detected that right circumstances DEBUG=True are present to allow a cross-site scripting attack. !/usr/bin/env python3 -- coding: utf-8 -- """Djang...

Pallets Werkzeug <0.15.5 - Local File Inclusion Detection

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. !/usr/bin/env python3 -- coding: utf-8 -- """Pallets Werkzeug before 0.""" from kittysploit import from lib.protocols.http.httpclient import...

WordPress CTHthemes - Cross-Site Scripting Detection

WordPress CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes contain reflected cross-site scripting vulnerabilities via a search query. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress CTHthemes CityBook before 2.""" from kittysploit import from...

LimeSurvey 4.1.11 - Local File Inclusion Detection

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 4.""" import re from kittysploit import from...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion Detection

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. !/usr/bin/env python3 -- coding: utf-8 -- """Media Library...

WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure Detection

WAVLINK WN530H4 M30H4.V5030.190403 contains an information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint. This can allow an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication...

Citrix XenMobile Server - Local File Inclusion Detection

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference: -...

Accela Civic Platform <=21.1 - Cross-Site Scripting Detection

Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via ssoAdapter/logoutAction.do successURL. !/usr/bin/env python3 -- coding: utf-8 -- """Accela Civic Platform through 21.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

phpfastcache - phpinfo Resource Exposure Detection

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. !/usr/bin/env python3 -- coding: utf-8 -- """phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastc.""" from kittysploit import...

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection Detection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...

CentOS Web Panel - OS Command Injection Detection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. !/usr/bin/env python3 -- coding: utf-8 -- """The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability...

EyouCMS 1.5.4 Open Redirect Detection

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Amprion Grid Loss Login Panel - Detect

Amprion Grid Loss login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Amprion Grid Loss login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amprion Grid Loss Login Panel -...

Archibus Web Central Login - Panel Detect

Archibus Web Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Archibus Web Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Archibus Web Central Login -...

DigitalOcean Key Exposure via Axiom Detection

Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments. !/usr/bin/env python3 -- coding: utf-8 -- """Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments.""" from kittysploit import from lib.protocols.http.httpclient...

Bash Configuration - Exposure Detection

Detected exposed bash configuration on web servers that could have contained sensitive information such as credentials, API keys, database connection strings, or internal paths. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed bash configuration on web servers that could have contain...

BMC Discovery Login Panel - Detect

BMC Discovery login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BMC Discovery login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BMC Discovery Login Panel - Detect',...

BSPHP - Information Disclosure Detection

Information disclosure in BSPHP Pro causing user and unauth IP disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Information disclosure in BSPHP Pro causing user and unauth IP disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

cPanel Backup Exclusion Configuration - Exposure Detection

cPanel backup exclusion configuration file cpbackup-exclude.conf was publicly accessible, potentially exposing directory structure and system paths. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel backup exclusion configuration file cpbackup-exclude.""" from kittysploit import from...

IceWarp Mail Server ≤11.4.0 - Open Redirect Detection

IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows attackers to redirect users to arbitrary external domains through malicious URLs. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp Mail Server version 11.""" import re from kittysploit import from...

Sangfor EDR 3.2.17R1/3.2.21 - Remote Code Execution Detection

Sangfor EDR 3.2.17R1/3.2.21 allows remote unauthenticated users to to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor EDR 3.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Yarn Lock File Disclosure Detection

The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. !/usr/bin/env python3 -- coding: utf-8 -- """The yarn.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yarn...

Ansible Semaphore Panel Detect

An Ansible Semaphore login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ansible Semaphore login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible Semaphore...

White Star Software ProTop - Directory Traversal Detection

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. !/usr/bin/env python3 -- coding:...

WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion Detection

Campress theme for WordPress up to 1.35 contains a local file inclusion caused by 'campresswoocommercegetajaxproducts' function, letting unauthenticated attackers include and execute arbitrary PHP files, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Campress the...

Apache Spark Environment - Exposure Detection

Detected Apache Spark Web UI exposed environment variables and application information without authentication, potentially revealing sensitive configuration details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Apache Spark Web UI exposed environment variables and application information...

Jolokia file write to RCE jfr Detection

File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticCommand/jfrStart !/usr/bin/env python3 -- coding: utf-8 -- """File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticComman.""" from kittysploit...

GL.iNET SSID Key Disclosure Detection

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on GL.""" from kittysploit import from lib.protocols.http.httpclient import...

Ampache Update Page Exposure Detection

Ampache update page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache update page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Update Page Exposure Detection', 'description':...

Ansible AWX Detection

Detects Ansible AWX Instance !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ansible AWX Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible AWX Detection', 'description': 'Detects Ansible AWX...

Apache Cocoon detect

Detects Apache Cocoon detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Cocoon detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Cocoon detect', 'description': 'Detects Apache Cocoon...

WordPress Aspose Importer & Exporter 1.0 - Local File Inclusion Detection

WordPress Aspose Importer & Exporter version 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Aspose Importer & Exporter version 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Android Asset Links Configuration - Detect

The .well-known/assetlinks.json file was found on the target server. This file is used by Android applications to establish verified app-to-web domain associations through the Digital Asset Links protocol. !/usr/bin/env python3 -- coding: utf-8 -- """The .""" from kittysploit import from...

AudioCodes Login - Panel Detect

AudioCodes login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AudioCodes login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AudioCodes Login - Panel Detect', 'description':...

Amazon Web Services S3 Explorer - Detect

Amazon Web Services S3 Explorer page was detected. Page contains links to sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon Web Services S3 Explorer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AWS X-Ray Sample Application Detection

AWS X-Ray is a service that helps developers analyze and debug distributed applications. !/usr/bin/env python3 -- coding: utf-8 -- """AWS X-Ray is a service that helps developers analyze and debug distributed applications.""" from kittysploit import from lib.protocols.http.httpclient import...

Azure Instrumentation Key - Exposure Detection

Detected exposed Azure Application Insights Instrumentation Keys classic ikey format in HTTP responses, which allowed anyone to send telemetry data and, in some older configurations, could enable read access via undocumented or legacy APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...

Balada Injector Malware - Detect

Checks websites for Balada Injector malware. !/usr/bin/env python3 -- coding: utf-8 -- """Checks websites for Balada Injector malware.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Balada Injector Malware...

BeyondTrust Login Panel - Detect

BeyondTrust login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BeyondTrust login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BeyondTrust Login Panel - Detect', 'description...

Chatwoot Login Panel - Detect

Chatwoot login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Chatwoot login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chatwoot Login Panel - Detect', 'description': 'Chatwoot logi...

Checkpoint Login Panel - Detect

Checkpoint login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkpoint login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkpoint Login Panel - Detect', 'description':...

Commvault Web Console Panel - Detect

Commvault web console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Commvault web console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Commvault Web Console Panel...

Joomla! Component DW Graph - Local File Inclusion Detection

A directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs comdwgraphs component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

Joomla! Component News Portal 1.5.x - Local File Inclusion Detection

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in t...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect Detection

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...