SolarWinds Serv-U 15.3 - Directory Traversal Detection

SolarWinds Serv-U 15.3 is susceptible to local file inclusion, which may allow an attacker access to installation and server files and also make it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site...

Homebridge - Unfinished Installation Detection

Homebridge instance with incomplete installation detected. The setup wizard is exposed, allowing anyone to create the first admin account and gain full control over the Homebridge instance. This can lead to unauthorized access to smart home devices and potential network compromise. !/usr/bin/env...

Cisco Meraki Cloud Security Appliance Panel - Detect

Cisco Meraki Cloud Security Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Meraki Cloud Security Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco...

Uptime Kuma - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Uptime Kuma - Panel...

VertiGIS - Detect

VertiGIS products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VertiGIS products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VertiGIS - Detect', 'description': 'VertiGIS products was...

Gitpod Dockerfile - Exposure Detection

Detected exposed .gitpod.Dockerfile files. These files define the development environment and may disclose installed software versions, internal paths, or potentially hardcoded secrets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed .""" import re from kittysploit import from...

Pair Drop Panel - Detect

Local file sharing in your browser. Inspired by Apple's AirDrop. Fork of Snapdrop. !/usr/bin/env python3 -- coding: utf-8 -- """Local file sharing in your browser.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pair...

PowerCom Network Manager Detection

Detects PowerCom Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PowerCom Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerCom Network Manager Detection', 'description':...

AWStats Config - Detect

AWStats configuration information was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AWStats configuration information was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWStats Config - Detect',...

JetBrains TeamCity - Guest User Access Enabled Detection

TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI. !/usr/bin/env python3 -- coding: utf-8 -- """TeamCity provides the ability to turn on the guest login allowing anonymous access to the TeamCity UI.""" from kittysploit import from...

vBulletin - Full Path Disclosure Detection

Detects vBulletin - Full Path Disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects vBulletin - Full Path Disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'vBulletin - Full Path Disclosure...

eMerge E3 1.00-06 - Local File Inclusion Detection

Linear eMerge E3-Series devices are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

TCExam <= 14.8.1 - Sensitive Information Exposure Detection

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. !/usr/bin/env python3 -- coding: utf-8 -- """When installed following the default/recommended settings,...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

Icecast Streaming Media Server Detection

Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...

aaPanel Detection

Detects aaPanel Linux management panel login interface. !/usr/bin/env python3 -- coding: utf-8 -- """Detect aaPanel Linux management panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "aaPanel Detection",...

Alert Before Your Post <= 0.1.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in postalert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerabilit...

SearchBlox <9.2.2 - Local File Inclusion Detection

SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the...

Revive Adserver <5.1.0 - Open Redirect Detection

Revive Adserver before 5.1.0 contains an open redirect vulnerability via the dest, oadest, and ct0 parameters of the lg.php and ck.php delivery scripts. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized...

MinIO Operator Console Authentication Bypass Detection

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """MinIO...

Node-RED - Unauthenticated Access Detection

Node-RED flow editor is accessible without authentication. Node-RED is a flow-based programming tool that can execute arbitrary system commands, read/write files, and make network requests. Unauthenticated access leads to remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Node-RE...

Druid Monitor Login Panel - Detect

Druid Monitor login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Druid Monitor login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Druid Monitor Login Panel - Detect',...

StackStorm Web UI - Panel Detect

StackStorm Web UI interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """StackStorm Web UI interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'StackStorm Web UI - Panel Detect',...

OpenEMR 4.1 - Local File Inclusion Detection

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the formname parameter to 1 contrib/acog/printform.php; or 2 loadform.php, 3 viewform.php, or 4 trendform.php in interface/patientfile/encounter. !/usr/bin/en...

Kubernetes Dashboard <1.10.1 - Authentication Bypass Detection

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Dashboard before 1.""" from kittysploit import from lib.protocols.http.httpclient import...

Tiki Wiki CMS Groupware 5.2 - Local File Inclusion Detection

Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Tiki Wiki CMS Groupware 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiki Wiki CM...

Grav < 1.7 - Open Redirect Detection

Grav before 1.7 has an open redirect vulnerability via common/Grav.php. This is partially fixed in 1.6.23 and still present in 1.6.x. !/usr/bin/env python3 -- coding: utf-8 -- """Grav before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting Detection

FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerability. The login redir parameter is not sanitized, so an attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

Enigma NMS - Detection

Detects Enigma NMS - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Enigma NMS - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Enigma NMS - Detection', 'description': 'Detects Enigma NMS...

Brickcom Camera - Unauthenticated Snapshot Access Detection

Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras was exposed live camera snapshots without authentication via the ONVIF media endp.""" from kittysploit impo...

Vite Dev Server - Information Exposure Detection

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting Detection

McAfee ePolicy Orchestrator before 5.10.9 Update 9 is vulnerable to a cross-site scripting vulnerability that allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. reference: -...

OfficeWeb365 Indexs Interface - Arbitrary File Read Detection

There is any file reading in the officeWeb365 Indexs interface. !/usr/bin/env python3 -- coding: utf-8 -- """There is any file reading in the officeWeb365 Indexs interface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Gitea Public Registration Enabled Detection

A misconfiguration in Gitea allows arbitrary users to sign up and read code hosted on the service. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfiguration in Gitea allows arbitrary users to sign up and read code hosted on the service.""" from kittysploit import from...

Synology DSM System Info - Detect

Detected the disclosure of Synology DiskStation Manager DSM system information via the SYNO.API.Info endpoint, identifying all available APIs, versions, and installed packages returned without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the disclosure of Synology...

YeaLink DM 3.6.0.20 - Remote Command Injection Detection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Yealink Device Management DM 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Sony IPELA Engine IP Camera - Hardcoded Account Detection

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.""" from kittysploit import from...

Drawio <18.0.4 - Server-Side Request Forgery Detection

Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Drawio prior to 18.""" from kittysploit import from...

WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval Detection

WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the requested file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the.""" import re...

Brother Printer Detection

Brother Printer unauthorized access was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Brother Printer unauthorized access was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Brother Printer...

SAP SuccessFactors Login Panel - Detect

SAP SuccessFactors login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP SuccessFactors login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP SuccessFactors Login Panel -...

Call Break CMS Panel - Detect

Call Break CMS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Call Break CMS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Call Break CMS Panel - Detect', 'description': 'Call...

XWiki - Open Redirect Detection

XWiki Platform is vulnerable to open redirect attacks due to improper validation of the xredirect parameter. This allows an attacker to redirect users to an arbitrary website. The vulnerability is patched in versions 14.10.4 and 15.0. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is...

OctoPrint Installation Page - Exposure Detection

Checks for the presence of a OctoPrint Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a OctoPrint Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoPrint...

Brickcom Camera - Default Login Detection

Detected Brickcom IP cameras accessible using default credentials admin/admin. Successful authentication exposed full camera configuration, live video streams, LED control, and network settings to remote attackers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Brickcom IP cameras accessib...

qdPM 9.1 - Cross-site Scripting Detection

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM V9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.1 -...

Apache S2-032 Struts - Remote Code Execution Detection

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when dynamic method invocation is enabled, allows remote attackers to execute arbitrary code via method: prefix related to chained expressions. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re fr...

Apache Tomcat Example Scripts - Detect

Multiple Apache Tomcat example scripts were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Apache Tomcat example scripts were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Tomcat...

Tyto Sahi pro 7.x/8.x - Local File Inclusion Detection

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Tyto Sahi Pro versions through 7.""" from...

TOTOLINK/Realtek Routers - Information Disclosure Detection

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...