Joomla MarvikShop ShoppingCart 3.4 - Sql Injection Detection

Joomla MarvikShop ShoppingCart 3.4 is vulnerable to SQL injection which is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input...

JsAPI Ticket Json Detection

JsAPI Ticket internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """JsAPI Ticket internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'JsAPI Ticket Json Detection', 'description':...

Kaeser Sigma Air Manager - Panel Detection

Detected exposed Kaeser Sigma Air Manager login panel !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Kaeser Sigma Air Manager login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kaeser Sigma A...

Kafka Operation API - Cluster Detection

Kafka Operation API Cluster page was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Operation API Cluster page was detected and appeared to be accessible without authentication.""" from kittysploit import from...

Kafka Manager Panel Detection

Detects Kafka Manager Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Kafka Manager Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kafka Manager Panel Detection', 'description': 'Detects Kafka...

Kavita Login Panel - Detect

Kavita login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kavita login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kavita Login Panel - Detect', 'description': 'Kavita logi...

Kavita - Local File Inclusion Detection

Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename parameter of the /api/image/cover-upload. !/usr/bin/env python3 -- coding: utf-8 -- """Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename...

Kedacom Network Keyboard Console - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the KEDACOM network keyboard console. Attacking this vulnerability can read arbitrary information from the server !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the KEDACOM network keyboard...

Kenesto - Login Detect

Kenesto login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Kenesto login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kenesto - Login Detect', 'description': 'Kenesto...

Keybase Domain Ownership Verification Detection

Detects presence of keybase.txt used to prove domain ownership via Keybase identity. !/usr/bin/env python3 -- coding: utf-8 -- """Detects presence of keybase.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Keybase...

Keycloak Admin Console Configuration Disclosure Detection

Detected Keycloak admin console configuration was exposing realm name, client ID, SSL requirements, and authentication server URL enabling reconnaissance and targeted authentication attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Keycloak admin console configuration was exposing...

Kiali - Detect

kiali panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """kiali panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kiali - Detect', 'description': 'kiali panel was detected.', 'author':...

Kingsoft VGM Antivirus - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in Kingsoft Antivirus. An attacker can obtain any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in Kingsoft Antivirus.""" import re from kittysploit impor...

kkFileView Panel - Detect

kkFileView panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """kkFileView panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'kkFileView Panel - Detect', 'description': 'kkFileView panel...

Detect Kong

The Cloud-Native API Gateway !/usr/bin/env python3 -- coding: utf-8 -- """The Cloud-Native API Gateway.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Kong', 'description': 'The Cloud-Native API Gateway',...

Kubeflow Katib Panel - Detect

Kubeflow Katib, a Kubernetes-native project for automated machine learning AutoML that performs hyperparameter tuning, early stopping, and neural architecture search, was detected. Its web UI is normally served under the /katib/ path behind the Kubeflow Central Dashboard, fronted by an Istio/OIDC...

Kubelet Metrics Detection

Kube Metrics Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kube Metrics Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Metrics Detection', 'description': 'Kube Metric...

Kubelet Running Pods Detection

Scans for kubelet running pods !/usr/bin/env python3 -- coding: utf-8 -- """Scans for kubelet running pods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubelet Running Pods Detection', 'description': 'Scans for...

Kube State Metrics Exposure Detection

An attacker can detect the public instance of a Kube-State-Metrics metrics. The Kubernetes API server exposes data about the count, health, and availability of pods, nodes, and other Kubernetes objects. !/usr/bin/env python3 -- coding: utf-8 -- """An attacker can detect the public instance of a...

LANDESK(R) Management Agent Detect

Detects LANDESKR Management Agent Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LANDESKR Management Agent Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LANDESKR Management Agent Detect',...

Landray EIS - SQL Injection Detection

Landray's smart collaboration platform EIS has a very rich collection of modules to meet the needs of organizations and enterprises in knowledge, collaboration, and project management system construction. There is a SQL injection vulnerability in the rptlistreportdefinefield.aspx interface of...

Langfuse Panel - Detect

Langfuse panel was detected. Langfuse is an open-source LLM engineering platform for observability, evaluations, prompt management and analytics. Exposed instances may reveal LLM prompts, traces, evaluations, and connected API keys. !/usr/bin/env python3 -- coding: utf-8 -- """Langfuse panel was...

LangSmith Panel - Detect

LangSmith panel was detected. LangSmith is LangChain's platform for debugging, testing, evaluating, and monitoring LLM applications. !/usr/bin/env python3 -- coding: utf-8 -- """LangSmith panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Laravel Debug Enabled Detection

Laravel with APPDEBUG set to true is prone to show verbose errors. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel with APPDEBUG set to true is prone to show verbose errors.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Laravel End-of-Life Detection

Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Laravel framework versions that had reached End-of-Life EOL and no longer received security updates.""" from kittysploit import from...

Laravel Nova - Unauthenticated Admin Panel Access Detection

Laravel Nova admin panel is accessible without authentication. Nova provides full CRUD access to application models and database records, making unauthenticated access a critical security risk. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Nova admin panel is accessible without...

Laravel Telescope Disclosure Detection

Telescope provides insight into the requests coming into your application, exceptions, log entries, database queries, queued jobs, mail, notifications, cache operations, scheduled tasks, variable dumps, and more. !/usr/bin/env python3 -- coding: utf-8 -- """Telescope provides insight into the...

LDAP Account Manager Login Panel - Detect

LDAP Account Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LDAP Account Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LDAP Account Manager Login...

Lenovo ThinkServer System Manager Login Panel - Detect

Lenovo ThinkServer System Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo ThinkServer System Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

LibreNMS Installation Page - Exposure Detection

Detects exposed LibreNMS installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed LibreNMS installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LibreNMS Installation Page - Exposu...

Libvirt Exporter Metrics Detection

Libvirt Exporter is leaking metrics. !/usr/bin/env python3 -- coding: utf-8 -- """Libvirt Exporter is leaking metrics.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Libvirt Exporter Metrics Detection', 'description...

Liferay Login Panel - Detect

Liferay login panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """Liferay login panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Liferay Login Panel - Detect', 'description': 'Liferay...

Limesurvey Installer Exposure Detection

Limesurvey is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Limesurvey is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Linkerd Service detection

Detects Linkerd Service detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Linkerd Service detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linkerd Service detection', 'description':...

LinkTap Gateway Exposure Detection

LinkTap Gateway is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """LinkTap Gateway is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinkTap Gateway Exposure Detection', 'description': 'LinkTap Gatewa...

LinShare Login Panel - Detect

LinShare login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LinShare login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinShare Login Panel - Detect', 'description':...

Live Helper Chat Detect

Detects Live Helper Chat Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Live Helper Chat Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Live Helper Chat Detect', 'description': 'Detec...

LockSelf Login Panel - Detect

LockSelf login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LockSelf login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LockSelf Login Panel - Detect', 'description':...

Locust Exposure Detection

Locust is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Locust is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Locust Exposure Detection', 'description': 'Locust is exposed.', 'author':...

Lucy Security Admin Panel Detection

Detects Lucy Security Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lucy Security Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lucy Security Admin Panel Detection', 'description':...

Lychee Installer Detection

Lychee is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Lychee is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

macOS Server Panel - Detect

Detects macOS Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects macOS Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'macOS Server Panel - Detect', 'description':...

Maestro LuCI Login Panel - Detect

Maestro LuCI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Maestro LuCI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Maestro LuCI Login Panel - Detect',...

Magento Configuration Panel - Detect

Magento configuration panel was detected. Misconfigured instances of Magento may disclose usernames, passwords, and database configurations via /app/etc/local.xml. !/usr/bin/env python3 -- coding: utf-8 -- """Magento configuration panel was detected.""" from kittysploit import from...

Magento Debug Log - Exposure Detection

Detected Magento debug.log file was publicly accessible. This file contained sensitive debugging information including full server paths, stack traces, customer activity, internal code paths, cache data, and cron job details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Magento debug."""...

Magento Downloader - Full Path Disclosure Detection

Detected Magento Downloader component exposed internal file system paths through direct file access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Magento Downloader component exposed internal file system paths through direct file access.""" from kittysploit import from...

Magento End-of-life Detect

Magento end of life detection. !/usr/bin/env python3 -- coding: utf-8 -- """Magento end of life detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Magento End-of-life Detect', 'description': 'Magent...

Magento Installation Wizard Detection

Magento is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Magento is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Samsung MagicINFO Configuration File Detection

Detects exposure of Samsung MagicINFO configuration file /MagicInfo/config.js,and extracts magicInfoFrontEndVersion. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposure of Samsung MagicINFO configuration file /MagicInfo/config.""" from kittysploit import from lib.protocols.http.httpclie...

MAMP Server - Cross-Site Scripting Detection

A Cross-Site Scripting XSS vulnerability exists in the default installation of MAMP server. The file /Applications/MAMP/htdocs/index.php is susceptible to malicious input, allowing attackers to inject JavaScript code that executes in the context of the victim's browser. This vulnerability can be...