Symfony Database Configuration File - Detect

Symfony database configuration file was detected and may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Symfony database configuration file was detected and may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Optergy Proton/Enterprise Building Management System - Open Redirect Detection

Optergy Proton/Enterprise Building Management System contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Optergy...

Laravel Terminal - Exposed Detection

The web application was built on the Laravel framework, with Laravel Terminal enabled and publicly accessible; this was detected in the production environment and led to disclosure of sensitive application information. !/usr/bin/env python3 -- coding: utf-8 -- """The web application was built on...

Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery Detection

WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value in com/wavemaker/studio/StudioService.java, leading to disclosure of local files and server-side request forgery. !/usr/bin/env python3 -- coding: utf-8 -- """WaveMaker Studio 6.""" import re from kittysploi...

Named Process Exporter Detection

Named process exporter is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Named process exporter is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Named Process Exporter Detection', 'description':...

Pallets Werkzeug <0.15.5 - Local File Inclusion Detection

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. !/usr/bin/env python3 -- coding: utf-8 -- """Pallets Werkzeug before 0.""" from kittysploit import from lib.protocols.http.httpclient import...

Ivanti Incapptic Connect Panel - Detect

Ivanti Incapptic Connect panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Incapptic Connect panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info...

Quilium Panel - Detect

Quilium CMS Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Quilium CMS Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Quilium Panel - Detect', 'description': 'Quiliu...

SAP Web Dispatcher detection

Detection of SAP Web Dispatcher service !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Web Dispatcher service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Web Dispatcher detection',...

SecuritySpy Camera Panel - Detect

SecuritySpy Camera panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecuritySpy Camera panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecuritySpy Camera Panel - Detect',...

vRealize Log Insight - Panel Detect

Detect vRealize Log Insight login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vRealize Log Insight login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vRealize Log...

Seldon Core - Detect

Seldon Core, an open-source MLOps/LLMOps framework for deploying, monitoring, and scaling machine learning models on Kubernetes, was detected. Its Pipeline Gateway component, which routes inference requests between chained model pipelines, exposed an unauthenticated status endpoint returning a...

NexusDB <4.50.23 - Local File Inclusion Detection

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """NexusQA NexusDB before 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure Detection

The application is vulnerable to sensitive directory indexing / information disclosure vulnerability. An unauthenticated attacker can visit the log directory and disclose the server's log files containing sensitive and system information. !/usr/bin/env python3 -- coding: utf-8 -- """The applicati...

MyuCMS - Local File Inclusion Detection

MyuCMS is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """MyuCMS is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MyuCMS - Local File...

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure Detection

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the backups-dup-lite/tmp directory or the backups-dup-pro/tmp directory in the Pro version, which temporarily stores files containing sensitive data. When directory listing is...

Dolibarr Unauthenticated Contacts Database Theft Detection

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in Dolibarr 16 before 16.""...

Mailpit < 1.28.3 - Server-Side Request Forgery Detection

Mailpit = 1.28.0 contains a server-side request forgery caused by insufficient validation of internal IP addresses in the /proxy endpoint, letting attackers make requests to internal network resources, exploit requires crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Mailpi...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Grafana Snapshot - Authentication Bypass Detection

Grafana instances up to 7.5.11 and 8.1.5 allow remote unauthenticated users to view the snapshot associated with the lowest database key by accessing the literal paths /api/snapshot/:key or /dashboard/snapshot/:key. If the snapshot is in public mode, unauthenticated users can delete snapshots by...

Weights & Biases - Detect

Weights & Biases W&B instance was detected. W&B is a popular MLOps platform for experiment tracking, model versioning, and collaborative ML development. Self-hosted deployments expose the full experiment management interface. !/usr/bin/env python3 -- coding: utf-8 -- """Weights & Biases W&B...

Securepoint UTM - Leaking Remote Memory Contents Detection

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not use...

Graphql Strawberry Detect

Detects Graphql Strawberry Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Strawberry Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Strawberry Detect', 'description': 'Detects...

Senayan Library Management System v9.4.0(SLIMS 9) - Cross Site Scripting Detection

SLIMS 9 was discovered to contain destination request parameter that copies the value of an HTML tag attribute which is encapsulated in double quotation marks. !/usr/bin/env python3 -- coding: utf-8 -- """SLIMS 9 was discovered to contain destination request parameter that copies the value of an...

Samsung Printer Panel - Detect

Samsung printer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung printer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Samsung Printer Panel - Detect', 'description':...

LANDESK(R) Management Agent Detect

Detects LANDESKR Management Agent Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LANDESKR Management Agent Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LANDESKR Management Agent Detect',...

Apache Configuration File - Detect

Apache configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Configuration File - Detect',...

Jolokia Detection

Detects Jolokia Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jolokia Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikejolokiaversion, validatejsonprobe class ModuleScanner, Httpclient: in...

MooSocial 3.1.8 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected...

TinaCMS - Path Traversal Detection

TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. !/usr/bin/env python3 -- coding: utf-8 -- """TinaCMS CLI 2.""" from...

PHPIPAM <v1.5.1 - Missing Authorization Detection

In phpIPAM 1.5.1, an unauthenticated user could download the list of high-usage IP subnets that contains sensitive information such as a subnet description, IP ranges, and usage rates via findfullsubnets.php endpoint. The bug lies in the fact that findfullsubnets.php does not verify if the user i...

Secure Access Gateway SecSSLVPN - Authentication Bypass Detection

The Secure Access Gateway SecSSL 3600 secure access gateway system has an unauthorized access vulnerability. An attacker can obtain the user list and modify the user account password through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Secure Access Gateway SecSSL 3600 secu...

Tongda User Session Disclosure Detection

Tongda User session exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda User session exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tongda User Session Disclosure Detection', 'description': 'Tongda...

Grafana 3.0.1-7.0.1 - Server-Side Request Forgery Detection

Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...

Cisco Unified CM Console - Panel Detection

Cisco Unified CM Console panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Unified CM Console panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Unified CM Console -...

WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting Detection

WordPress Sunshine Photo Cart plugin before 2.9.15 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affecte...

Flir - Local File Inclusion Detection

Flir is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Flir is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Flir - Local File Inclusi...

Express-handlebars - Local File Inclusion Detection

Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

OpenCMS - Cross-Site Scripting Detection

OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """OpenCMS below 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenCMS - Cross-Site Scripting...

Coming Soon Page Detect

Detects Coming Soon Page Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Coming Soon Page Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Coming Soon Page Detect', 'description': 'Detects Coming...

ECSIMAGING PACS <= 6.21.5 - Command Execution and Local File Inclusion Detection

ECSIMAGING PACS Application 6.21.5 and below suffer from a command injection vulnerability and a local file include vulnerability. The 'file' parameter on the page /showfile.php can be exploited to perform command execution or local file inclusion. Often on ECSIMAGING PACS, the www-data user has...

Mastodon - Open Redirect Detection

Mastodon version 4.5.8, 4.4.15, 4.3.21 is vulnerable to unauthenticated Open Redirect vulnerability CWE-601 exists in the /web/ route due to improper handling of URL-encoded path segments. !/usr/bin/env python3 -- coding: utf-8 -- """Mastodon version 4.""" import re from kittysploit import from...

pgAdmin 4 - Authentication Bypass Detection

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. !/usr/bin/env python3 -- coding: utf-8 -- """pgAdmin 4 versions 8."""...

Shopware < 5.5.8 - Cross-Site Scripting Detection

Shopware before 5.5.8 contains a reflected cross-site scripting XSS caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim...

rConfig 3.9.2 - Remote Code Execution Detection

rConfig 3.9.2 is susceptible to a remote code execution vulnerability. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution...

WordPress My Calendar <= 3.1.9 - Cross-Site Scripting Detection

WordPress plugin My Calendar = 3.1.9 is susceptible to reflected cross-site scripting which can be triggered via unescaped usage of URL parameters in multiple locations throughout the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin My Calendar = 3.""" from kittysploit import...

mCloud Panel - Installer Detection

mCloud installer was detected. !/usr/bin/env python3 -- coding: utf-8 -- """mCloud installer was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mCloud Panel - Installer Detection', 'description': 'mCloud...

Hetzner Cloud Detect

Detects Hetzner Cloud Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hetzner Cloud Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Hetzner Cloud Detect', 'description': 'Detects Hetzner Cloud...

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload Detection

The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin does not validate signatures when creating them on the server from user input...

W3 Total Cache < 2.8.2 - Log File Exposure Detection

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...