node-srv - Local File Inclusion Detection

node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path. !/usr/bin/env python3 -- coding: utf-8 -- """node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a...

WordPress Twenty Twenty Theme - Full Path Disclosure Detection

WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to .""" from...

Joomla! Component OrgChart 1.0.0 - Local File Inclusion Detection

A directory traversal vulnerability in the OrgChart comorgchart component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the OrgChart...

Leantime - Unfinished Installation Detection

Detected a Leantime instance identified with the setup installation page accessible at /install, enabling unauthenticated users to create the first administrator account and configure the database. !/usr/bin/env python3 -- coding: utf-8 -- """Detected a Leantime instance identified with the setup...

FusionAuth Exposed Admin Setup Detection

FusionAuth Admin Setup is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """FusionAuth Admin Setup is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FusionAuth Exposed Admin Setup Detection',...

Prefect - Detect

Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines.""" from kittysploit import from...

Bullwark Momentum Series JAWS 1.0 - Local File Inclusion Detection

Bullwark Momentum Series JAWS 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Bullwark Momentum Series JAWS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bullwar...

Casdoor Login Panel - Detect

Casdoor login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Casdoor Login Panel - Detect', 'description': 'Casdoor...

Smart Office Web 20.28 - Information Disclosure Detection

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in Smart Office We...

Coming Soon Page Detect

Detects Coming Soon Page Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Coming Soon Page Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Coming Soon Page Detect', 'description': 'Detects Coming...

Grafana Unauthenticated Access Detection

Detects Grafana instances configured with anonymous access enabled, allowing unauthenticated users to access dashboards, data sources, organization info, and potentially sensitive monitoring data without any credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grafana instances...

NexusDB <4.50.23 - Local File Inclusion Detection

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NexusQA NexusDB before 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

TOTOLINK N150RT - Password Exposure Detection

Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in the password.htm page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects password exposure vulnerability in TOTOLINK N150RT router where sensitive credentials are exposed in t.""" from...

ECSIMAGING PACS <= 6.21.5 - Command Execution and Local File Inclusion Detection

ECSIMAGING PACS Application 6.21.5 and below suffer from a command injection vulnerability and a local file include vulnerability. The 'file' parameter on the page /showfile.php can be exploited to perform command execution or local file inclusion. Often on ECSIMAGING PACS, the www-data user has...

WordPress Setup Configuration Detection

Exposed Wordpress Setup Configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Exposed Wordpress Setup Configuration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress Setup Configuration Detection',...

PraisonAI - Authentication Bypass Detection

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. !/usr/bin/env python3 -- coding: utf-8 --...

Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery Detection

WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value in com/wavemaker/studio/StudioService.java, leading to disclosure of local files and server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """WaveMaker Studio 6.""" import re from kittysploi...

Atom CMS v2.0 - Cross-Site Scripting Detection

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. !/usr/bin/env python3 -- coding: utf-8 -- """Atom CMS v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Spring Cloud Config - Local File Inclusion Detection

Spring Cloud Config versions 2.2.x prior to 2.2.2, 2.1.x prior to 2.1.7, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. !/usr/bin/env python3 -- coding: utf...

WordPress 123ContactForm Plugin Directory Listing Detection

Searches for sensitive directories present in the 123contactform-for-wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 123contactform-for-wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Reportico Administration Page - Detect

Create a simple report using the designer front end in seconds from a single SQL statement. Add expressions, user criteria, charts, groups, aggregations, page headers, page footers, hyperlinks and even custom plugin code. !/usr/bin/env python3 -- coding: utf-8 -- """Create a simple report using t...

PHP-FPM Configuration Page - Detect

PHP-FPM configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-FPM configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PHP-FPM Configuration Page - Detect',...

Appspec YML/YAML - Detect

Appspec YML and YAML files are susceptible to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Appspec YML and YAML files are susceptible to information disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

SHOUTcast Server Panel - Detect

SHOUTcast Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SHOUTcast Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SHOUTcast Server Panel - Detect', 'description':...

Joomla! Component Picasa 2.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Microsoft AD CS Web Enrollment - Detect

Detects Microsoft Active Directory Certificate Services AD CS Web Enrollment and certificate download pages. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Active Directory Certificate Services AD CS Web Enrollment and certificate download pages.""" from kittysploit import from...

Apache Answer - Detection

Detects Apache Answer version through API endpoit !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Answer version through API endpoit.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Answer -...

Apache Ambari Exposure Admin Login Panel Detection

An Apache Ambari panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Ambari panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ambari Exposure Admin Login Panel...

Intercom widget detection

Detects Intercom widget detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Intercom widget detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Intercom widget detection', 'description': 'Detects...

Spring Eureka Exposure Detection

Spring Eureka is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Eureka is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Eureka Exposure Detection', 'description': 'Spring Eureka is...

HPE System Management Anonymous Access Detection

HPE system management anonymous access is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """HPE system management anonymous access is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HPE System Management...

Apache RocketMQ Console Panel - Detect

Apache RocketMQ Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache RocketMQ Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache RocketMQ Console Panel -...

Hewlett Packard Integrated Lights Out 5 Login Panel - Detect

Hewlett Packard Integrated Lights Out 5 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett Packard Integrated Lights Out 5 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

noVNC Login Panel - Detect

noVNC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """noVNC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'noVNC Login Panel - Detect', 'description': 'noVNC login...

ATutor < 2.2.1 - Cross Site Scripting Detection

ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ATutor 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

Seo Panel 4.8.0 - Cross-Site Scripting Detection

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Seo Panel 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

VMware NSX Login Panel - Detect

VMware NSX login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware NSX login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware NSX Login Panel - Detect', 'description':...

Jeecg-boot 3.5.0 qurestSql - SQL Injection Detection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. !/usr/bin/env python3 -- coding: utf-8 -- ""...

Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS) Detection

It is possible to inject arbitrary JavaScript code into the /browse endpoint of the Calibre content server, allowing an attacker to craft a URL that when clicked by a victim, will execute the attacker’s JavaScript code in the context of the victim’s browser. If the Calibre server is running with...

Jinhe OA_C6_UploadFileDownLoadnew - Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the UploadFileDownLoadnew.aspx interface of Jinhe OA C6. An unauthenticated attacker can use this vulnerability to read important system files such as database configuration files, system configuration files, database configuration files, etc.,...

PMB v7.4.6 - Cross-Site Scripting Detection

PMB v7.4.6 allows an attacker to perform a reflected XSS on exportz3950.php via the 'query' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PMB v7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PMB v7.4.6 -...

WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion Detection

WordPress Delightful Downloads Jquery File Tree versions 2.1.5 and older are susceptible to local file inclusion vulnerabilities via jqueryFileTree. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Delightful Downloads Jquery File Tree versions 2.""" from kittysploit import from...

HashiCorp Consul Web UI Login Panel - Detect

HashiCorp Consul Web UI login panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """HashiCorp Consul Web UI login panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Consul Web U...

HuggingFace TEI & TGI - Detect

Detected the presence of HuggingFace Text Embeddings Inference TEI, a toolkit for serving text embedding and re-ranking models, and HuggingFace Text Generation Inference TGI, a Rust/Python toolkit for serving and deploying large language models. !/usr/bin/env python3 -- coding: utf-8 -- """Detect...

HiveQueue Agent Detection

HiveQueue Agent is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """HiveQueue Agent is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HiveQueue Agent Detection', 'description': 'HiveQueue Agent is...

HYPERPLANNING Login Panel - Detect

HYPERPLANNING products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HYPERPLANNING products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HYPERPLANNING Login Panel - Detect', 'description...

Imprivata Appliance Installation Exposure Detection

Imprivata Appliance is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Imprivata Appliance is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient...

Trend Micro Apex One Login Panel - Detect

Trend Micro Apex One login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Trend Micro Apex One login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Trend Micro Apex One Login...

WordPress Memphis Document Library 3.1.5 - Local File Inclusion Detection

WordPress Memphis Document Library 3.1.5 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Memphis Document Library 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Apereo CAS Cross-Site Scripting Detection

Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Apereo CAS through 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...