WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting Detection

WordPress Active Products Tables for WooCommerce plugin prior to 1.0.5 contains a cross-site scripting vulnerability.. The plugin does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, An attacker can inject arbitrary script in the browser of an...

WordPress Gallery <2.0.0 - Cross-Site Scripting Detection

WordPress Gallery plugin before 2.0.0 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8...

WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting Detection

WordPress Contact Form 7 Captcha plugin before 0.1.2 contains a reflected cross-site scripting vulnerability. It does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form 7 Captcha plugin before...

VMware Workspace ONE Access - Server-Side Template Injection Detection

VMware Workspace ONE Access is susceptible to a remote code execution vulnerability due to a server-side template injection flaw. An unauthenticated attacker with network access could exploit this vulnerability by sending a specially crafted request to a vulnerable VMware Workspace ONE or Identit...

Zabbix - SAML SSO Authentication Bypass Detection

When SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor because a user login stored in the session was not verified. !/usr/bin/env python3 -- coding: utf-8 -- """When SAML SSO authentication is enabled non-default, session data can be modified by a...

Zabbix Setup Configuration Authentication Bypass Detection

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators but also by unauthenticated users. A malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend. !/usr/bin/env python3 -- coding: utf-8 -- """After th...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting Detection

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Cedar Gate EZ-NET...

MeterSphere < 2.5.0 SSRF Detection

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in...

SAP Internet Graphics Server (IGS) Detection

Detection of SAP Internet Graphics Server IGS !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Internet Graphics Server IGS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Internet Graphics Server I...

SAPControl ListConfigFiles - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the ListConfigFiles web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

SAP Logon Error Message Detection

Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code. !/usr/bin/env python3 -- coding: utf-8 -- """Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code.""" from kittysploit import from...

SAP Message Server Console - Exposure Detection

Detected the SAP Message Server HTTP console on /msgserver. When accessed directly, the message server returns an HTML page. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the SAP Message Server HTTP console on /msgserver.""" from kittysploit import from lib.protocols.http.httpclient impor...

SAP NetWeaver - Backdoor Detection

Detected a potential backdoor in SAP NetWeaver allowing unauthorized command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a potential backdoor in SAP NetWeaver allowing unauthorized command execution.""" from kittysploit import from lib.protocols.http.httpclient import...

SAP NetWeaver ICM - Detect

Detection of SAP NetWeaver ABAP Webserver or Java Application Server ICM/ICF !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP NetWeaver ABAP Webserver or Java Application Server ICM/ICF.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SAP NetWeaver Composition Environment Tools - Detect

Detects the presence of the SAP NetWeaver Process Integration / Composition Environment Tools page !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of the SAP NetWeaver Process Integration / Composition Environment Tools page.""" from kittysploit import from...

SAP NetWeaver ICM Info page leak Detection

Detection of SAP NetWeaver ABAP Webserver /public/info page !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP NetWeaver ABAP Webserver /public/info page.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SAPControl OSExecute - Remote Code Execution (RCE) Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the OSExecute web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

SAP ICM Admin Web Interface Detection

The SAP ICM Internet Communication Manager admin monitor interface is often set to public and can be accessed without authentication. The interface discloses version information about the underlying operating system, a brief SAP patch level overview, running services including their corresponding...

SAPControl ReadDeveloperTrace Log - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the ReadDeveloperTrace web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP interface exposes the...

SAP Web Dispatcher admin portal detection

Detection of SAP Web Dispatcher Admin Portal !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher Admin Portal.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher admin portal...

SAP Web Dispatcher detection

Detection of SAP Web Dispatcher service !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher detection',...

Sassy Social Share <=3.3.3 - Cross-Site Scripting Detection

WordPress Sassy Social Share 3.3.3 and prior is vulnerable to cross-site scripting because certain AJAX endpoints return JSON data with no Content-Type header set and then use the default text/html. In other words, any JSON that has HTML will be rendered as such. !/usr/bin/env python3 -- coding:...

Sass Lint File Exposure Detection

Detects Sass Lint File Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Sass Lint File Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sass Lint File Exposure Detection', 'description': 'Detec...

Satis Composer Repository - Detect

Satis composer repository was detected !/usr/bin/env python3 -- coding: utf-8 -- """Satis composer repository was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Satis Composer Repository - Detect',...

Sauter moduWeb Login Panel - Detect

Sauter moduWeb login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sauter moduWeb login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sauter moduWeb Login Panel - Detect',...

Scan2Net - Panel Detection

Scan2Net Login was detected. This software is used to manage ImageAccess devices.Universities and public institutions often use ImageAccess devices. !/usr/bin/env python3 -- coding: utf-8 -- """Scan2Net Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import...

Scribble Diffusion Panel - Detect

A tool to turn your rough sketch into a refined image using AI. !/usr/bin/env python3 -- coding: utf-8 -- """A tool to turn your rough sketch into a refined image using AI.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

ScriptCase Panel Detect

Detects ScriptCase Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ScriptCase Panel Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ScriptCase Panel Detect', 'description': 'Detec...

SCS Remote Monitoring and Control Login Panel - Detect

SCS Remote Monitoring and Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SCS Remote Monitoring and Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SCS...

Seafile Panel - Detect

Seafile panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Seafile panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seafile Panel - Detect', 'description': 'Seafile panel was...

Seafile - Public Registration Enabled Detection

Detected public user registration is enabled on a Seafile instance. !/usr/bin/env python3 -- coding: utf-8 -- """Detected public user registration is enabled on a Seafile instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Seagate NAS Login - Detect

Seagate NAS - SEAGATE Login was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate NAS - SEAGATE Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Seagate NAS Login - Detect',...

Safe Search Replace Exposure Detection

Safe Search Replace is exposed leaking internal info. !/usr/bin/env python3 -- coding: utf-8 -- """Safe Search Replace is exposed leaking internal info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Safe Search...

SearXNG - Detect

A SearXNG search engine was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A SearXNG search engine was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SearXNG - Detect', 'description': 'A SearXNG...

SeaweedFS Filer - Unauthenticated Access Detection

SeaweedFS Filer interface is exposed without authentication.Unauthenticated users may be able to upload, modify, or access files, potentially leading to malicious file hosting, data exposure, or remote compromise. !/usr/bin/env python3 -- coding: utf-8 -- """SeaweedFS Filer interface is exposed...

SecMail Login Panel - Detect

SecMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecMail Login Panel - Detect', 'description': 'SecMail...

SecNet Login Panel - Detect

SecNet login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecNet login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecNet Login Panel - Detect', 'description': 'SecNet logi...

Secret Token Ruby - File Disclosure Detection

Ruby Secret token is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby Secret token is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Secret Token Ruby - File Disclosure Detection', 'description':...

Secure Access Gateway SecSSLVPN - Authentication Bypass Detection

The Secure Access Gateway SecSSL 3600 secure access gateway system has an unauthorized access vulnerability. An attacker can obtain the user list and modify the user account password through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Secure Access Gateway SecSSL 3600 secu...

Securepoint UTM Admin Panel - Detect

Securepoint UTM admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Securepoint UTM admin panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Securepoint UTM Admin Panel -...

Secure Login Service Login Panel - Detect

Secure Login Service login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Secure Login Service login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Secure Login Service Login...

SecuritySpy Camera Panel - Detect

SecuritySpy Camera panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecuritySpy Camera panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecuritySpy Camera Panel - Detect',...

Seeyon OA A6 createMysql.jsp Database - Information Disclosure Detection

Seeyon OA A6 has leaked sensitive database information. An attacker can obtain the database account and password MD5 by accessing a specific URL. !/usr/bin/env python3 -- coding: utf-8 -- """Seeyon OA A6 has leaked sensitive database information.""" import re from kittysploit import from...

Seeyon A8 Management Monitor - Default Login Detection

Seeyon OA A8-m has status monitoring page information leakage. Attackers can obtain sensitive information such as website paths and user names for further attacks. Attackers can use this vulnerability to directly enter the application system or management system to conduct system, web page, data...

Seldon Core - Detect

Seldon Core, an open-source MLOps/LLMOps framework for deploying, monitoring, and scaling machine learning models on Kubernetes, was detected. Its Pipeline Gateway component, which routes inference requests between chained model pipelines, exposed an unauthenticated status endpoint returning a...

SelfCheck System Manager - Panel Detection

Detects SelfCheck System Manager - Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SelfCheck System Manager - Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SelfCheck System Manager - Panel...

Semantic UI Framework - Detect

Detects the presence of Semantic UI, a development framework that helps create beautiful, responsive layouts using human-friendly HTML. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Semantic UI, a development framework that helps create beautiful, responsive layouts u."""...

Sensitive Storage Data - Detect

A generic search for 'storage' in sensitive key files, file names, logs, etc., returned a match. !/usr/bin/env python3 -- coding: utf-8 -- """A generic search for 'storage' in sensitive key files, file names, logs, etc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

SentinelOne Management Console Login Panel - Detect

SentinelOne Management Console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SentinelOne Management Console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SentinelO...

Seowon 130-SLC router - Remote Code Execution Detection

Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users via the router ip & Portif available in the request. !/usr/bin/env python3 -- coding: utf-8 -- """Seowon 130-SLC router lets remote attackers execute commands without authentication as admin users v...