Cisco Systems Login Panel - Detect

Cisco Systems login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Systems login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Systems Login Panel - Detect',...

Polynote Panel - Detect

Polynote is a polyglot notebook supporting Scala, Python, SQL, and Spark with a rich UI !/usr/bin/env python3 -- coding: utf-8 -- """Polynote is a polyglot notebook supporting Scala, Python, SQL, and Spark with a rich UI.""" from kittysploit import from lib.protocols.http.httpclient import...

Compal CH7465LG Login Panel - Detect

Compal CH7465LG login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Compal CH7465LG login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Compal CH7465LG Login Panel - Detect',...

WordPress Plugin SG Optimizer - Full Path Disclosure Detection

WordPress Plugin SG Optimizer Plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin SG Optimizer Plugin files are publicly...

Jolokia - CompilerDirectivesAdd File Read Detection

Jolokia is vulnerable to local file inclusion via compilerDirectivesAdd. !/usr/bin/env python3 -- coding: utf-8 -- """Jolokia is vulnerable to local file inclusion via compilerDirectivesAdd.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PHP-Fusion 9.03.50 - Remote Code Execution Detection

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-Fusion 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

HP iLO Serial Key - Detect

HP iLO serial key was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HP iLO serial key was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HP iLO Serial Key - Detect', 'description': 'HP iLO serial...

Golden FTP Server Pro Service - Detect

Golden FTP Server Pro service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Golden FTP Server Pro service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Gold...

WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting Detection

WordPress MW Font Changer plugin 4.2.5 and before contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting Detection

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The Redirection for Contact Form 7 WordPress plugin before 2.""" from...

AWS OpenSearch Login - Detect

AWS OpenSearch login page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AWS OpenSearch login page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS OpenSearch Login - Detect',...

SecurEnvoy Login Panel - Detect

SecurEnvoy login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecurEnvoy login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecurEnvoy Login Panel - Detect', 'description':...

Fortiswitch Panel - Detect

Fortiswitch panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fortiswitch panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fortiswitch Panel - Detect', 'description': 'Fortiswitch...

Selea Targa IP OCR-ANPR Camera - Local File Inclusion Detection

Selea Targa IP OCR-ANPR camera suffers from an unauthenticated local file inclusion vulnerability because input passed through the Download Archive in Storage page using getfile.php script is not properly verified before being used to download files. This can be exploited to disclose the contents...

DomPDF - Configuration Page Detection

DOMPDF Configuration page was detected, which contains paths, library versions and other potentially sensitive information !/usr/bin/env python3 -- coding: utf-8 -- """DOMPDF Configuration page was detected, which contains paths, library versions and other potentially sensitive.""" from kittysplo...

Admin Menu Editor - Full Path Disclosure Detection

Admin Menu Editor WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Admin Menu Editor...

Citrix ADC Gateway Login Panel - Detect

Citrix ADC Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ADC Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix ADC Gateway Login Panel -...

Movies <= 0.6 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

IceWarp WebMail 11.3.1.5 - Cross-Site Scripting Detection

IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp WebMail 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IceWarp...

IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect Detection

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in IceWarp Mail Server Deep Castle 2 v.""" import re from kittysploit import from...

Jupyter notebooks exposed to reading and writing Detection

Jupyter notebooks are exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter notebooks are exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyter notebooks exposed to reading and writing Detection',...

Device42 Panel - Detect

Device42 was detected — a Discovery, Asset Management and Dependency Mapping for Data Center and Cloud. !/usr/bin/env python3 -- coding: utf-8 -- """Device42 was detected — a Discovery, Asset Management and Dependency Mapping for Data Center and Cloud.""" from kittysploit import from...

MPSec ISG1000 - Local File Inclusion Detection

MPSec ISG1000 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MPSec ISG1000 is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPSec...

GoogleService-Info.plist - Detect

The GoogleService-Info.plist file contains sensitive information about the Firebase project, including the Google App ID, Project ID, Client ID, Client Secret, and Reversed Client ID. This file is used to authenticate the Firebase SDK in iOS applications. !/usr/bin/env python3 -- coding: utf-8 --...

Joomla! Component com_jcollection - Directory Traversal Detection

A directory traversal vulnerability in the JCollection comjcollection component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JCollectio...

Last.fm Rotation 1.0 - Path Traversal Detection

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in...

Symantec PGP Global Directory Panel - Detect

Symantec PGP Global Directory panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec PGP Global Directory panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Symantec PGP Global...

WordPress Astra - Full Path Disclosure Detection

WordPress Astra Theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Astra Theme files are publicly accessible without ABSPATH protection...

SV3C HD Camera L Series - Open Redirect Detection

SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtai...

Fortinet FortiOS - Cross-Site Scripting Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. !/usr/bin/env python3 -- coding:...

FXServer < v9601 - Information Exposure Detection

Incorrect Access Control in FXServer version's v9601 and prior, for CFX.re FiveM, allows unauthenticated users to modify and read userdata via exposed api endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Incorrect Access Control in FXServer version's v9601 and prior, for CFX.""" from...

Graphql Strawberry Detect

Detects Graphql Strawberry Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Strawberry Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Strawberry Detect', 'description': 'Detects...

XWiki DeleteApplication - Cross-Site Scripting Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates are vulnerable to a reflected XSS attack...

Apache Kafka Consumer Offset Monitor Panel - Detect

Apache Kafka Consumer Offset Monitor panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Kafka Consumer Offset Monitor panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache...

Accueil WAMPSERVER Configuration Page - Detect

Accueil WAMPSERVER configuration page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Accueil WAMPSERVER configuration page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accueil WAMPSERVER...

Jupyter Lab - Unauthenticated Access Detection

JupyterLab was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """JupyterLab was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyt...

Samsung MagicINFO Panel - Detect

Samsung MagicINFO panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung MagicINFO panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samsung MagicINFO Panel - Detect',...

Default IBM HTTP Server Detection

Detects Default IBM HTTP Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Default IBM HTTP Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Default IBM HTTP Server Detection', 'description': 'Detec...

WordPress Table of Contents Plus - Full Path Disclosure Detection

WordPress Table of Contents Plus plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Table of Contents Plus plugin is vulnerable to full path disclosure via direct access to plugin file.""" from kittysploit import...

FirstClass FTP Service - Detect

FirstClass FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FirstClass FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'FirstClass FTP...

CrushFTP WebInterface Panel - Detect

CrushFTP WebInterface login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CrushFTP WebInterface login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CrushFTP WebInterface Panel...

KoboldAI Panel - Detect

KoboldAI was detected. KoboldAI was an AI text adventure and story generation interface that supports multiple local and remote language models including koboldcpp and AI Horde. !/usr/bin/env python3 -- coding: utf-8 -- """KoboldAI was detected.""" from kittysploit import from...

Emerson Network Power IntelliSlot Web Card Panel - Detect

Emerson Network Power IntelliSlot Web Card panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Emerson Network Power IntelliSlot Web Card panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

OPNsense Panel - Detect

OPNsense panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OPNsense panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OPNsense Panel - Detect', 'description': 'OPNsense panel was...

Kubernetes Operational View Detect

Detects Kubernetes Operational View Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Kubernetes Operational View Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kubernetes Operational View Detect'...

node-srv - Local File Inclusion Detection

node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path. !/usr/bin/env python3 -- coding: utf-8 -- """node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a...

WordPress Twenty Twenty Theme - Full Path Disclosure Detection

WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress theme twentytwenty internal file system path of a WordPress installation is exposed or disclosed to .""" from...

Joomla! Component OrgChart 1.0.0 - Local File Inclusion Detection

A directory traversal vulnerability in the OrgChart comorgchart component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the OrgChart...

Prefect - Detect

Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Prefect, a modern workflow orchestration platform with Orion UI for managing data pipelines.""" from kittysploit import from...

Bullwark Momentum Series JAWS 1.0 - Local File Inclusion Detection

Bullwark Momentum Series JAWS 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Bullwark Momentum Series JAWS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bullwar...