Zzcms `register_nodb.php` - Cross Site Scripting Detection

Identified a reflected Cross-Site Scripting XSS vulnerability in registernodb.php of ZZCMS, which allowed injection of malicious scripts via user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Identified a reflected Cross-Site Scripting XSS vulnerability in registernodb.""" from...

AVEVA Edge SCADA - Login Panel Detection

AVEVA Edge SCADA web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """AVEVA Edge SCADA web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AVEVA Edge...

WildFly Welcome Page - Tech Detect

WildFly welcome page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WildFly welcome page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WildFly Welcome Page - Tech Detect', 'description':...

Kong Manager OSS/Admin - Exposure Detection

Exposed Kong Manager OSS/Admin interface accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Kong Manager OSS/Admin interface accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

SMTP4Dev Interface - Exposed Detection

Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations. !/usr/bin/env python3 -- coding: utf-8 -- """Publicly exposed smtp4dev interface allowing access to intercepted emails and test configurations.""" from kittysploit import from...

IPdiva Mediation Login Panel - Detect

IPdiva Mediation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IPdiva Mediation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IPdiva Mediation Login Panel - Detect...

Cloudflare Access - Login Panel Detection

Detected exposed Cloudflare Access login pages. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Cloudflare Access login pages.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudflare Access - Login...

LG-Ericsson iPECS NMS 30M - Local File Inclusion Detection

Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs. !/usr/bin/env python3 -- coding: utf-8 -- """Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=.""" import re from kittysploit import from lib.protocols.http.httpclien...

Php User.ini Disclosure Detection

PHP user.ini file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """PHP user.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Php User.ini Disclosure Detection', 'description': 'PHP user.ini file is exposed.',...

MLflow Absolute Path Traversal Detection

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. !/usr/bin/env python3 -- coding: utf-8 -- """Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Advanced Comment System 1.0 - Local File Inclusion Detection

ACS Advanced Comment System 1.0 is affected by local file inclusion via an advancedcomponentsystem/index.php?ACSpath=..%2f URI. !/usr/bin/env python3 -- coding: utf-8 -- """ACS Advanced Comment System 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

Apache NiFi - Information Disclosure Detection

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

Tomcat Exposed - Detect

An Apache Tomcat instance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Tomcat instance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tomcat Exposed - Detect', 'description': 'A...

Honeypot Detection

Honeypot was Detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeypot was Detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeypot Detection', 'description': 'Honeypot was Detected.',...

SolarView Compact <= 6.00 - Local File Inclusion Detection

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary read file vulnerability in SolarView Compact 6.""" from kittysploit import...

Label Studio < 1.18.0 - Reflected XSS Detection

Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -...

Avatier Password Management Panel Detection

An Avatier password management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Avatier password management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Avatier Password...

Start Element Manager Panel - Detect

Start Element Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Start Element Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Start Element Manager Panel - Detect',...

Pandora FMS Mobile Console Login Panel - Detect

Pandora FMS Mobile Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pandora FMS Mobile Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pandora FMS Mobil...

Polyfill.io - Backdoor Detection

The polyfill.io CDN was suspected to serve malware. Note: it's not exploitable anymore !/usr/bin/env python3 -- coding: utf-8 -- """The polyfill.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Polyfill.io ...

SonicWall SRA 4600 VPN - SQL Injection Detection

The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability.""" from kittysploit import from...

Grafana Unauthenticated Access Detection

Detects Grafana instances configured with anonymous access enabled, allowing unauthenticated users to access dashboards, data sources, organization info, and potentially sensitive monitoring data without any credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grafana instances...

WPMobile.App <= 11.56 - Open Redirect Detection

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

Jamf Pro Setup Assistant Panel - Detect

Jamf Pro Setup Assistant panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jamf Pro Setup Assistant panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jamf Pro Setup Assistant Panel -...

WordPress user registration enabled Detection

Detects WordPress user registration enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WordPress user registration enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress user registration enabl...

WordPress Plugin Site Kit by Google - Full Path Disclosure Detection

WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Leostream Login Panel - Detect

Leostream login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Leostream login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Leostream Login Panel - Detect', 'description':...

Joomla! Component Canteen 1.0 - Local File Inclusion Detection

A SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A SQL injection vulnerability in menu.""" import re from...

Cascade CMS Panel - Detect

Cascade CMS was detected — a web content management system for managing stand-out websites. !/usr/bin/env python3 -- coding: utf-8 -- """Cascade CMS was detected — a web content management system for managing stand-out websites.""" from kittysploit import from lib.protocols.http.httpclient import...

News Script Pro 2.4 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

JBoss detected

Detects JBoss detected. !/usr/bin/env python3 -- coding: utf-8 -- """Detects JBoss detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JBoss detected', 'description': 'Detects JBoss detected.',...

Apache ShardingSphere ElasticJob-UI privilege escalation Detection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

SOAP-based ASP.NET web services ASMX - Detect

SOAP-based ASP.NET web services collection was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SOAP-based ASP.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SOAP-based ASP.NET web services ASMX - Detect',...

Jamf Pro Login Panel - Detect

Jamf Pro login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jamf Pro login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jamf Pro Login Panel - Detect',...

MicroStrategy Web 10.4 - Information Disclosure Detection

MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...

Netgear R6850 - Information Disclosure Detection

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

Cisco Systems Login Panel - Detect

Cisco Systems login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Systems login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Systems Login Panel - Detect',...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting Detection

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open-School 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Cisco Prime License Manager - Detect

Detected exposed Cisco Prime License Manager portals !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Cisco Prime License Manager portals.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Prime...

Telerik Report Server Login Panel - Detect

Telerik Report Server login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Telerik Report Server login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Telerik Report Server Login...

Dockge Panel - Detect

A fancy, easy-to-use and reactive self-hosted docker compose.yaml stack-oriented manager !/usr/bin/env python3 -- coding: utf-8 -- """A fancy, easy-to-use and reactive self-hosted docker compose.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Bofamet Stealer C2 Panel - Detect

Bofamet Stealer C2 Login Panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """Bofamet Stealer C2 Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bofamet Stealer C2 Panel -...

Spotweb <= 1.5.1 - Cross Site Scripting Detection

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting XSS vulnerability in...

WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting Detection

WSO2 Management Console through 5.10 is susceptible to reflected cross-site scripting which can be exploited by tampering a request parameter in Management Console. This can be performed in both authenticated and unauthenticated requests. !/usr/bin/env python3 -- coding: utf-8 -- """WSO2 Manageme...

Adobe AEM Disk Usage Information Disclosure Detection

Adobe AEM Disk Usage Information is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe AEM Disk Usage Information is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe AEM Disk Usage Information...

PrestaShop MyPrestaModules - PhpInfo Disclosure Detection

PrestaShop modules by MyPrestaModules expose PHPInfo !/usr/bin/env python3 -- coding: utf-8 -- """PrestaShop modules by MyPrestaModules expose PHPInfo.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrestaShop...

WordPress CDI <5.1.9 - Cross Site Scripting Detection

WordPress CDI plugin prior to 5.1.9 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the response of an AJAX action. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

Gradio - Open Redirect Detection

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure Detection

The SiteGuard WP Plugin plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.7.6. This is due to the plugin not restricting redirects from wp-register.php which may disclose the login page URL. This makes it possible for unauthenticated attacke...

Apiman Login Panel Detection

An Apiman instance was detected via the login redirection. !/usr/bin/env python3 -- coding: utf-8 -- """An Apiman instance was detected via the login redirection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apima...