Node-RED - Unauthenticated Access Detection

Node-RED flow editor is accessible without authentication. Node-RED is a flow-based programming tool that can execute arbitrary system commands, read/write files, and make network requests. Unauthenticated access leads to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Node-RE...

Prometheus targets API endpoint Detection

The targets endpoint exposes services belonging to the infrastructure, including their roles and labels. In addition to showing the target machine addresses, the endpoint also exposes metadata labels that are added by the target provider. These labels are intended to contain non-sensitive values,...

DirectAdmin Login Panel - Detect

DirectAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DirectAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DirectAdmin Login Panel - Detect', 'description...

Zimbra Collaboration Suite Login Panel - Detect

Zimbra Collaboration Suite panel was detected. Zimbra Collaboration Suite simplifies the communication environment, connects people over multiple channels, and provides a single place to manage collaboration and communication. !/usr/bin/env python3 -- coding: utf-8 -- """Zimbra Collaboration Suit...

Moxa MXview One - Network Management Panel Detection

Moxa MXview One is a network management platform for industrial Ethernet infrastructure, OT network monitoring, and topology visualisation. It is widely used in manufacturing, energy, and transportation to manage industrial switches and routers. !/usr/bin/env python3 -- coding: utf-8 -- """Moxa...

Well-Known ATProto DID Detection

Detects AT Protocol DID reference used by Bluesky. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AT Protocol DID reference used by Bluesky.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known ATProto DI...

Adiscon LogAnalyzer - Information Disclosure Detection

Adiscon LogAnalyzer was discovered. Adiscon LogAnalyzer is a web interface to syslog and other network event data. It provides easy browsing and analysis of real-time network events and reporting services. !/usr/bin/env python3 -- coding: utf-8 -- """Adiscon LogAnalyzer was discovered.""" from...

rConfig 3.9.4 - SQL Injection Detection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. !/usr/bin/env python3 --...

Hospital Management System Login Panel - Detect

Hospital Management System login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hospital Management System login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hospital Manageme...

Cloudflare Speedtest - Detect

Detected the exposed default page of the Cloudflare Speedtest service. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the exposed default page of the Cloudflare Speedtest service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Jinhe OA_C6_UploadFileDownLoadnew - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the UploadFileDownLoadnew.aspx interface of Jinhe OA C6. An unauthenticated attacker can use this vulnerability to read important system files such as database configuration files, system configuration files, database configuration files, etc.,...

Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

eG Manager Detect

Detects eG Manager Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects eG Manager Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eG Manager Detect', 'description': 'Detects eG Manager Detect.',...

Ivanti Sentry - OS Command Injection Detection

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution !/usr/bin/env python3 -- coding: utf-8 -- """An OS Command Injection vulnerability in Ivanti Sentry before the...

CirCarLife Scada <4.3 - System Log Exposure Detection

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. !/usr/bin/env python3 -- coding: utf-8 -- """CirCarLife Scada before...

GitList Disclosure Detection

GitList is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GitList is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitList Disclosure Detection', 'description': 'GitList is exposed.', 'author':...

Bitrix Site Manager - Log File Disclosure Detection

Detected Bitrix Site Manager log files, potentially exposing sensitive information including database credentials, file paths, SQL queries, and user session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Bitrix Site Manager log files, potentially exposing sensitive information...

Erxes <0.23.0 - Cross-Site Scripting Detection

Erxes before 0.23.0 contains a cross-site scripting vulnerability. The value of topicID parameter is not escaped and is triggered in the enclosing script tag. !/usr/bin/env python3 -- coding: utf-8 -- """Erxes before 0.""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Cornerstone OnDemand Panel - Detect

Cornerstone OnDemand panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cornerstone OnDemand panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cornerstone OnDemand Panel - Detect',...

Oracle Retail Xstore Suite - Pre-authenticated Path Traversal Detection

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

SuperWebMailer 9.31.0.01799 - Cross-Site Scripting Detection

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting XSS vulenrability via the component api.php. !/usr/bin/env python3 -- coding: utf-8 -- """SuperWebMailer v9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Sunbird DCIM - Detect

Sunbird DCIM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sunbird DCIM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sunbird DCIM - Detect', 'description': 'Sunbi...

WordPress ChurcHope Theme <= 2.1 - Local File Inclusion Detection

WordPress ChurcHope Theme = 2.1 is susceptible to local file inclusion. The vulnerability is caused by improper filtration of user-supplied input passed via the 'file' HTTP GET parameter to the '/lib/downloadlink.php' script, which is publicly accessible. !/usr/bin/env python3 -- coding: utf-8 --...

NUUO NVRmini 2 3.0.8 - Local File Inclusion Detection

NUUO NVRmini 2 3.0.8 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini 2 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NUUO NVRmini 2 3.0.8 - Local File Inclusion...

Inductive Automation Ignition - Gateway Panel Detection

Inductive Automation Ignition is a widely-deployed industrial SCADA/HMI platform used in manufacturing, utilities, and process industries. The Ignition Gateway web interface provides access to project management, OPC-UA tag browsing, and system configuration. Exposed gateways may allow...

UFIDA U8 CRM cfillbacksetting.php - SQL Injection Detection

UFIDA U8-CRM system /config/fillbacksetting.php contains an SQL injection vulnerability, which allows attackers to manipulate the database through maliciously constructed SQL statements, resulting in data leaks, tampering or destruction, and seriously threatening system security. !/usr/bin/env...

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

NocoDB Panel - Detect

NocoDB Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NocoDB Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NocoDB Panel - Detect', 'description': 'NocoDB Login...

EventON <= 2.1 - Missing Authorization Detection

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id. !/usr/bin/env python3 -- coding: utf-8 -- """The EventON WordPres...

Modoboa Login Panel - Detect

Modoboa login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Modoboa login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Modoboa Login Panel - Detect', 'description': 'Modoboa...

IceWarp WebClient - Remote Code Execution Detection

IceWarp WebClient is susceptible to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp WebClient is susceptible to remote code execution.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

CAS Login Panel - Detect

CAS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CAS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CAS Login Panel - Detect', 'description': 'CAS login panel was...

Wing FTP 6.4.4 - Cross-Site Scripting Detection

Wing FTP 6.4.4 is vulnerable to cross-site scripting via its web interface because an arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser. !/usr/bin/env python3 -- coding: utf-8 --...

WordPress Plugin Hello Dolly - Full Path Disclosure Detection

WordPress Plugin Hello Dolly plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Hello Dolly plugin files are publicly accessibl...

Symantec Data Loss Prevention Login Panel - Detect

Symantec Data Loss Prevention login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Data Loss Prevention login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec Da...

Netsweeper 4.0.8 - Directory Traversal Detection

A directory traversal vulnerability in webadmin/reporter/viewserverlog.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. dot dot in the log parameter in a stats action. !/usr/bin/env python3 -- coding: utf-8 --...

LotusCMS 3.0 - Remote Code Execution Detection

LotusCMS 3.0 is susceptible to remote code execution via the Router function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call and allow remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """LotusCMS 3.""" from kittysploit import from...

Apache Druid Unauth Detection

Apache Druid is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Druid is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Druid Unauth Detection',...

Microsoft SharePoint - Web Services Discovery Detection

Detected exposed SharePoint web services via /vtibin/spdisco.aspx endpoint !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed SharePoint web services via /vtibin/spdisco.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

Shirne CMS 1.2.0 - Local File Inclusion Detection

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. !/usr/bin/env python3 -- coding: utf-8 -- """Shirne CMS 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Zipkin Discovery Detection

Unauthenticated access to Zipkin was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated access to Zipkin was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zipkin Discovery...

Connect Box Login Panel - Detect

Connect Box login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Connect Box login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Connect Box Login Panel - Detect',...

FastCGI Test Page Detection

FastCGI test page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FastCGI test page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FastCGI Test Page Detection', 'description': 'FastCGI...

LuCi Login Panel - Detect

LuCi login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LuCi login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LuCi Login Panel - Detect', 'description': 'LuCi login panel...

Lansweeper Login Panel - Detect

Lansweeper login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lansweeper Login Panel - Detect', 'description':...

EasyImage down.php - Arbitrary File Read Detection

down.php file in EasyImage is vulnerable to arbitrary file read. !/usr/bin/env python3 -- coding: utf-8 -- """down.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EasyImage down.php - Arbitrary File Read Detection',...

Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API - Detect

Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Contact CHARX SEC-3XXX AC Charging Controller REST API was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Turbo Website Reviewer Installer Panel Detection

Turbo Website Reviewer is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Turbo Website Reviewer is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from...

Oxid EShop Installer Exposure Detection

Oxid EShop is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Oxid EShop is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Cloudflare Nginx Detect

Detects Cloudflare Nginx Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cloudflare Nginx Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudflare Nginx Detect', 'description': 'Detects...