MongoDB Exposure Detection

Detected MongoDB instances exposed over HTTP using the native driver port. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MongoDB instances exposed over HTTP using the native driver port.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Mage AI - Insecure Default Authentication Setup Detection

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion Detection

The InstaWP Connect - 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files ...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the flag parameter in menu.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA ERP-NC V5.""" from kittysploit...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA...

Zimbra - Cross-Site Scripting via ICS Files Detection

Detects Zimbra Collaboration Suite versions vulnerable to CVE-2025-27915, a stored XSS vulnerability in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an email with a malicious ICS entry, embedded JavaScript executes via an ontoggle event...

XWiki Platform - SQL Injection Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

ETQ Reliance - Reflected XSS via SQLConverterServlet Detection

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

FLR Blocks <= 1.0.7 - Privilege Escalation

Unauthenticated attackers can change the administrator email via flrblocksusersettingsupdatehandle AJAX action. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Frontend Login and Registration Blocks - Privilege Escalation""" import secrets from kittysploit import from...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS Detection

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php v2.""" from...

MapTiler Tileserver-php v2.0 - Unauthenticated File Read Detection

MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitization of GET parameters in renderTile function, letting attackers read arbitrary files on the server, exploit requires crafted web requests !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php...

WordPress Madara Theme < 2.2.2.1 - Local File Inclusion Detection

Madara WordPress theme = 2.2.2 contains a local file inclusion vulnerability caused by improper sanitization of the 'template' parameter, letting unauthenticated attackers execute arbitrary files on the server, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """Madara...

JEHC-BPM - Remote Code Execute Detection

A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM = v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution. !/usr/bin/env python3...

Personal Weather Station Dashboard 12 - Directory Traversal Detection

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. !/usr/bin/env python3 -- coding: utf-8 -- """Person...

Discourse OAuth Social Login - Cross-site Scripting

Discourse ", for path in paths...

LaRecipe < 2.8.1 Remote Code Execution via SSTI

LaRecipe docs endpoint evaluates Blade/SSTI in query string leading to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """LaRecipe 2.8.1 Remote Code Execution via SSTI""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name":...

Copyparty <=1.18.6 - Cross-Site Scripting Detection

Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting XSS via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser. !/usr/bin/env python3...

Astro SSR - Open Redirect Detection

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. !/usr/bin/env python3...

Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download Detection

Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/downloadworkdirfile.py, letting attackers access unauthorized files, exploit requires crafted request. !/usr/bin/env python3 -- coding: utf-8 -- """Agent-Zero v0.""" import re from kittysploit import from...

DNN - Unrestricted Arbitrary File Upload

DNN 10.1.1 allows unauthenticated uploads via HtmlEditorProviders FileUploader.ashx. !/usr/bin/env python3 -- coding: utf-8 -- """DNN - Unrestricted Arbitrary File Upload""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header Detection

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. !/usr/bin/env python3 -- coding: utf-8 -- """danny-avila/librechat 0."""...

N-central - Authentication Bypass Detection

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4. !/usr/bin/env python3 -- coding: utf-8 -- """N-central 2025.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Mailpit < 1.28.3 - Server-Side Request Forgery Detection

Mailpit = 1.28.0 contains a server-side request forgery caused by insufficient validation of internal IP addresses in the /proxy endpoint, letting attackers make requests to internal network resources, exploit requires crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpi...

Modular DS - Broken Access Control

Modular Connector login endpoint issues wordpressloggedin cookie without auth. !/usr/bin/env python3 -- coding: utf-8 -- """Modular DS - Broken Access Control""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks Detection

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a remote code execution caused by improper handling in Upload function and maxfilesize parameter in dashuploader components, letting remote attackers execute arbitrary code, exploit requires crafted request. !/usr/bin/env python3 -- coding:...

Vite Dev Server - Path Traversal in Optimized Deps .map Handling Detection

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

PraisonAI AgentOS - Information Disclosure Detection

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

Dashy <= 4.3.6 - Reflected XSS via Workspace Detection

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

Cyber Chef Panel - Detect

A Cyber Chef Panel was detected !/usr/bin/env python3 -- coding: utf-8 -- """A Cyber Chef Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyber Chef Panel - Detect', 'description': 'A Cyber Chef...

Dagster - Webserver UI Exposure Detection

Detected an exposed Dagster data orchestration webserver UI, potentially allowing unauthorized access to data pipelines, job configurations, and execution history. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Dagster data orchestration webserver UI, potentially allowing...

Dahua Intelligent IoT - Information Disclosure Detection

There is a vulnerability in the user login interface /evo-apigw/evo-oauth/oauth/token of Zhejiang Dahua Technology Co., Ltd. Intelligent IoT Integrated Management Platform. Users can successfully log in to the platform using justForTest/any password, causing information leakage. !/usr/bin/env...

Dataease - Default Login Detection

Dataease has a built-in account demo/dataease, and many developers forget to delete or change the account password. As a result, many Dataease can log in with this built-in account. !/usr/bin/env python3 -- coding: utf-8 -- """Dataease has a built-in account demo/dataease, and many developers...

Datagerry Panel - Detect

Datagerry panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Datagerry panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Datagerry Panel - Detect', 'description': 'Datagerry panel...

DBeaver Database Connections - Detect

DBeaver database connections were detected. !/usr/bin/env python3 -- coding: utf-8 -- """DBeaver database connections were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DBeaver Database Connections -...

DeepStack AI Server Panel - Detect

DeepStack, an open-source, self-hosted computer-vision AI server that provides object, face, and scene detection APIs, commonly deployed alongside home-automation stacks such as Home Assistant and Frigate on port 5000, was detected. An exposed, unauthenticated DeepStack landing/activation page wa...

CakePHP Default Page Detection

Detects CakePHP Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CakePHP Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CakePHP Default Page Detection', 'description': 'Detects CakePH...

CentOs-WebPanel Test Page Detection

Detects CentOs-WebPanel Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CentOs-WebPanel Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CentOs-WebPanel Test Page Detection', 'description':...

Lucee Default Page Detection

Detects Lucee Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lucee Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucee Default Page Detection', 'description': 'Detects Lucee Defaul...

Plesk Default Test Page Detection

Detects Plesk Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Plesk Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Plesk Default Test Page Detection', 'description': 'Detec...

Red Hat Enterprise Linux Test Page Detection

Detects Red Hat Enterprise Linux Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Red Hat Enterprise Linux Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Red Hat Enterprise Linux Test Page...

Deimos C2 - Detect

DeimosC2 is a post-exploitation Command & Control C2 tool that leverages multiple communication methods in order to control machines that have been compromised. DeimosC2 server and agents works on, and has been tested on, Windows, Darwin, and Linux.It is entirely written in Golang with a front en...

Detect Dell iDRAC9

The Integrated Dell Remote Access Controller iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """The Integrated Dell Remote Access Controller iDRAC is design...

Dependency-Track Login - Panel Detection

Dependency Track login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Dependency Track login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dependency-Track Login - Panel...

Deprecated Feature-Policy Header - Detection

Detected the presence of the deprecated Feature-Policy HTTP response header. The Feature-Policy header has been deprecated and replaced by the Permissions-Policy header. While Feature-Policy is still supported in some browsers for backward compatibility, it is recommended to migrate to...

Deskpro Private Controller - Default Page Detect

Deskpro Private Controller default page detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deskpro Private Controller default page detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deskpro Private...

desktop.ini exposure Detection

Detects desktop.ini exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects desktop.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'desktop.ini exposure Detection', 'description': 'Detects desktop.ini...

Divi Form Builder - Detect

Divi Form Builder is a premium WordPress form plugin by Divi Engine. !/usr/bin/env python3 -- coding: utf-8 -- """Divi Form Builder is a premium WordPress form plugin by Divi Engine.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Django Detection

An instance running Django is detected by looking for specific HTTP headers, HTML tags, and known endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running Django is detected by looking for specific HTTP headers, HTML tags, and known endpoints.""" from kittysploit import from...

Dockerfile - Detect

Dockerfile was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dockerfile was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dockerfile - Detect', 'description': 'Dockerfile was detected.'...

Docker Registry Browser - Detect

Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in the HTTP response. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of Docker Registry Browser technology based on known paths and characteristic content in.""" from...