Magento Connect Manager Installer - Detect

Magento Connect Manager installer was detected. The software, available via /downloader/ location, requires Magento admin rights and uses the same authorization methods as for backend. If an attacker locates a matching pair of login/password, the installation will be compromised. An attacker can...

WordPress Plugin Site Kit by Google - Full Path Disclosure Detection

WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

JK Status Manager - Detect

Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed JKStatus manager which is a web-based tool that allows...

Cellinx NVT Web Server - Local File Disclosure Detection

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Cellinx NVT v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Omni Commerce Connect (OCC) Rest APIs Detection

The Omni Commerce Connect OCC API exposes a broad set of commerce and data services. It enables you to integrate SAP Commerce functionality anywhere in your application landscape. !/usr/bin/env python3 -- coding: utf-8 -- """The Omni Commerce Connect OCC API exposes a broad set of commerce and da...

Mura CMS Setup Page - Exposure Detection

Detects exposed Mura CMS Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Mura CMS Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mura CMS Setup Page - Exposure Detection',...

WordPress Installer Log Detection

This file is generated during the installation process of wordpress and is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """This file is generated during the installation process of wordpress and is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...

WordPress Spreadsheet - Cross-Site Scripting Detection

WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/cod.""" from...

NocoDB Panel - Detect

NocoDB Login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """NocoDB Login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NocoDB Panel - Detect', 'description': 'NocoDB Login...

Hashicorp Consul Agent - Detect

Hashicorp Consul Agent was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hashicorp Consul Agent was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hashicorp Consul Agent - Detect', 'description':...

WordPress Admin Word Count Column 2.2 - Local File Inclusion Detection

The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique. !/usr/bin/env...

Roundcube ≤ 1.6.10 Post-Auth RCE (CVE-2025-49113)

Authenticated RCE in Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11. Unsafe from handling in settings/upload.php allows PHP object deserialization via a CryptGPGEngine gadget command execution as the web server user. !/usr/bin/env python3 -- coding: utf-8 -- """Roundcube ≤ 1.6.10 post-au...

Well-Known ATProto DID Detection

Detects AT Protocol DID reference used by Bluesky. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AT Protocol DID reference used by Bluesky.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known ATProto DI...

Dreamweaver Dwsync.xml Exposure Detection

The Dreamweaver file dwsync.xml was discovered. The dwsync.xml file is a file generated by Dreamweaver which contains information related to what files are in the website directory. !/usr/bin/env python3 -- coding: utf-8 -- """The Dreamweaver file dwsync.""" from kittysploit import from...

Netsweeper - Authentication Bypass Detection

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. !/usr/bin/env python3 -- coding: utf-8 -- """The Client Filt...

Netsparker Enterprise Installer Detection

Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Netsparker Enterprise is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclien...

Cisco Webex Meetings - Panel Detection

Detects Cisco Webex Meetings panel by requesting the modern Webex dashboard and matching unique Webex HTML markers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Cisco Webex Meetings panel by requesting the modern Webex dashboard and matching unique Webex HTML mar.""" from kittysploit impo...

Apache Ozone - Detect

Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Cloud-native environments. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Ozone web application, a scalable, redundant, and distributed object store for Hadoop and Clo.""" fro...

ActiveAdmin Admin Dasboard Exposure Detection

An ActiveAdmin Admin dashboard was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An ActiveAdmin Admin dashboard was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ActiveAdmin Admin Dasboard...

Sitecore Default Page - Detect

Detect Sitecore Content Management System CMS. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Default Page -...

Reprise License Manager 14.2 - Cross-Site Scripting Detection

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. !/usr/bin/env python3 -- coding: utf-8 -- """Reprise License Manager 14.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure Detection

1 Click WordPress Migration = 2.2 contains an information disclosure caused by uncleared debug information, letting attackers retrieve embedded sensitive data, exploit requires no specific privileges. !/usr/bin/env python3 -- coding: utf-8 -- """1 Click WordPress Migration = 2.""" from kittysploi...

SAPControl ListConfigFiles - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the ListConfigFiles web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting Detection

AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sa."""...

Vanna - SQL injection Detection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

SquirrelMail 1.2.11 - Local File Inclusion Detection

SquirrelMail 1.2.11 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """SquirrelMail 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SquirrelMail 1.2.11 - Local File...

DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting Detection

DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitization of the 'q' parameter, letting remote attackers execute arbitrary scripts, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """DokuWiki 2025-05-14a 'Librarian' contains a stored...

WordPress Simple Membership <4.1.1 - Cross-Site Scripting Detection

WordPress Simple Membership plugin before 4.1.1 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape parameters before outputting them back in AJAX actions. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Membership plugin before 4.""" fr...

SPIP Install - Exposure Detection

SPIP is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SPIP is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Service Account Credentials File Disclosure Detection

Service Account Credentials internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Service Account Credentials internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Service Account...

WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure Detection

The 3D FlipBook WordPress plugin ≤ v1.16.17 has a vulnerability where an unauthenticated AJAX action fb3dsendposts exposes sensitive data. Attackers can access all flipbook posts—including password-protected content, metadata, PDF URLs, and plugin settings—without authorization. !/usr/bin/env...

Jira Service Desk Login Panel - Detect

Jira Service Desk login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Jira Service Desk login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jira Service Desk Login Panel -...

Sidewinder FTP Proxy Service - Detect

Sidewinder FTP Proxy service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sidewinder FTP Proxy service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

XML Schema Detection

Detects XML Schema Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects XML Schema Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XML Schema Detection', 'description': 'Detects XML Schema...

XWiki - Detection

XWiki Platform was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XWiki - Detection', 'description': 'XWiki Platform was...

Joomla! Component com_jvideodirect - Directory Traversal Detection

Directory traversal vulnerability in the jVideoDirect comjvideodirect component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in the jVideoDirect...

Mail Mint < 1.19.5 - Unauthenticated Email Disclosure Detection

Mail Mint WordPress plugin 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Mail Mi...

IBM Advanced System Management Panel - Detect

IBM Advanced System Management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Advanced System Management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Advanced System...

F5 BIG-IP iControl REST Panel - Detect

F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested. !/usr/bin/env python3 -- coding: utf-8 -- """F5 BIG-IP iControl REST API discovered and may be vulnerable to an authentication bypass not tested.""" from kittysploit import from...

OpenTouch Multimedia Services - Detect

OpenTouch Multimedia Services Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenTouch Multimedia Services Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenTouch...

Comtrend ADSL - Remote Code Execution Detection

Comtrend ADSL CT-5367 C01R12 router is susceptible to remote code execution. A remote user can execute arbitrary commands via the telnet interface, The password for this interface is leaked to unauthenticated users via the password.cgi endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Comtre...

WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion Detection

WordPress Nevma Adaptive Images plugin before 0.6.67 allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Nevma Adaptive Images plugin before 0."""...

Monsta FTP - Detect

Detects Monsta FTP web-based file manager interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Monsta FTP web-based file manager interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Monsta FTP -...

LaunchDarkly - Detect

Detects the presence of LaunchDarkly, a feature management and feature flag platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of LaunchDarkly, a feature management and feature flag platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress 1 flash gallery listing Detection

Searches for sensitive directories present in the 1-flash-gallery plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 1-flash-gallery plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Prime Mover < 1.9.3 - Sensitive Data Exposure Detection

Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the 'prime-mover-export-files/1/' folder. This makes it possible for unauthenticated attackers to extract sensitive data including site and...

Sophos UTM User Portal - Login Panel Detection

Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client access and self-service. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client a.""" from...

Apache Tomcat Remote Command Execution Detection

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a an attacker is able to control the contents and name of a file on the server; and b the server is configured to use the PersistenceManager with a FileStore; and c the...

Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery Detection

Ignite Realtime Openfire through version 4.4.2 allows attackers to send arbitrary HTTP GET requests in FaviconServlet.java, resulting in server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """Ignite Realtime Openfire through version 4.""" from kittysploit import from...