LabVIEW/NI Service Locator Detection

National Instruments LabVIEW Service Locator detected and enumerated. This services leaks a list of all services provided by the device, hardware capabilities and possibly versions. These hardware devices should not be exposed to the internet. !/usr/bin/env python3 -- coding: utf-8 -- """National...

Landray EIS WS_getAllInfos - Information Disclosure Detection

Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability.""" from kittysploit import from...

Langflow - Detect

Langflow was detected. Langflow is an open-source visual LLM flow builder built on LangChain, providing a drag-and-drop interface for building AI pipelines and agents. Exposed instances may allow access to AI workflow configurations and API keys. !/usr/bin/env python3 -- coding: utf-8 --...

Langfuse Panel - Detect

Langfuse panel was detected. Langfuse is an open-source LLM engineering platform for observability, evaluations, prompt management and analytics. Exposed instances may reveal LLM prompts, traces, evaluations, and connected API keys. !/usr/bin/env python3 -- coding: utf-8 -- """Langfuse panel was...

Lansweeper Login Panel - Detect

Lansweeper login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lansweeper Login Panel - Detect', 'description':...

Larvel Debug Method Enabled Detection

Larvel Debug method is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Larvel Debug method is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Larvel Debug Method Enabled Detection', 'description':...

Laravel Terminal - Exposed Detection

The web application was built on the Laravel framework, with Laravel Terminal enabled and publicly accessible; this was detected in the production environment and led to disclosure of sensitive application information. !/usr/bin/env python3 -- coding: utf-8 -- """The web application was built on...

LDAP Account Manager Login Panel - Detect

LDAP Account Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LDAP Account Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LDAP Account Manager Login...

LVS Lean Value Management System Business - Directory Listing Detection

Multiple systems of Hangzhou Jila Technology Co., Ltd. have been found to have directory traversal vulnerabilities. These vulnerabilities arise from the inadequate access controls implemented in the /Business/ directory. Malicious actors can potentially leverage these vulnerabilities to illicitly...

Lenovo ThinkServer System Manager Login Panel - Detect

Lenovo ThinkServer System Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Lenovo ThinkServer System Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Letta Panel - Detect

Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory. !/usr/bin/env python3 -- coding: utf-8 -- """Letta formerly MemGPT is an open-source framework for building stateful LLM agents with long-term memory.""" from kittysploit import from...

LibrePhotos Panel - Detect

Detects LibrePhotos Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LibrePhotos Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LibrePhotos Panel - Detect', 'description': 'Detect...

Ligolo-ng Panel - Detect

Ligolo-ng panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ligolo-ng panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ligolo-ng Panel - Detect', 'description': 'Ligolo-ng panel was...

LimeSurvey - Open Redirect via editorLink Detection

LimeSurvey before 6.16.11 contains an open redirect vulnerability in the editorLink route. An attacker can craft a URL that redirects users to an arbitrary external site, potentially enabling phishing attacks. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 6.""" import re from...

LinkTap Gateway Exposure Detection

LinkTap Gateway is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """LinkTap Gateway is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LinkTap Gateway Exposure Detection', 'description': 'LinkTap Gatewa...

LiteLLM API - Swagger UI Detection

Detects exposed LiteLLM API Swagger UI interface. LiteLLM is a unified API for 100+ LLM providers OpenAI, Azure, Anthropic, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed LiteLLM API Swagger UI interface.""" from kittysploit import from lib.protocols.http.httpclient import...

LiveZilla Login Panel - Detect

LiveZilla login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LiveZilla login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LiveZilla Login Panel - Detect', 'description':...

LM Studio Panel - Detect

LM Studio is a desktop application for discovering, downloading, and running local LLMs !/usr/bin/env python3 -- coding: utf-8 -- """LM Studio is a desktop application for discovering, downloading, and running local LLMs.""" from kittysploit import from lib.protocols.http.httpclient import...

Locklizard Web Viewer Login Panel - Detect

Locklizard Web Viewer login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Locklizard Web Viewer login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Locklizard Web Viewer Login...

LockSelf Login Panel - Detect

LockSelf login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LockSelf login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LockSelf Login Panel - Detect', 'description':...

Log4j Properties - File Disclosure Detection

Log4j Properties file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Log4j Properties file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Log4j Properties - File Disclosure Detection',...

Lorex Panel - Detect

A lorex panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A lorex panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lorex Panel - Detect', 'description': 'A lorex panel was detected.'...

LUA Runtime Error - Page Detection

Detects LUA Runtime Error - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LUA Runtime Error - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LUA Runtime Error - Page Detection', 'description':...

Lucee Web and Lucee Server Admin Login Panel - Detect

Lucee admin login panels were detected in both Web and Server tabs. !/usr/bin/env python3 -- coding: utf-8 -- """Lucee admin login panels were detected in both Web and Server tabs.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Luftguitar CMS Arbitrary File Upload Detection

A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote service via the 'ftb.imagegallery.aspx' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote...

LVS DownLoad.aspx - Local File Inclusion (LFI) Detection

LVS lean value management system DownLoad.aspx has an arbitrary file reading vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """LVS lean value management system DownLoad.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

MachForm Admin Panel - Detect

MachForm Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MachForm Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MachForm Admin Panel - Detect', 'description':...

MACH-ProWeb Login Panel - Detect

MACH-ProWeb login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MACH-ProWeb login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MACH-ProWeb Login Panel - Detect', 'description...

Maestro LuCI Login Panel - Detect

Maestro LuCI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Maestro LuCI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Maestro LuCI Login Panel - Detect',...

Magento Cacheleak Detection

Magento Cacheleak is an implementation vulnerability, result of bad implementation of web-server configuration for Magento platform. Magento was developed to work under the Apache web-server which natively works with .htaccess files, so all needed configuration directives specific for various...

Magento Connect Manager Installer - Detect

Magento Connect Manager installer was detected. The software, available via /downloader/ location, requires Magento admin rights and uses the same authorization methods as for backend. If an attacker locates a matching pair of login/password, the installation will be compromised. An attacker can...

Magnolia CMS Installer Detection

Magnolia CMS is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Magnolia CMS is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

ZOHO ManageEngine APEX IT Help-Desk Panel - Detect

ZOHO MangageEngine APEX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO MangageEngine APEX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine APEX IT Help-Desk...

ZOHO ManageEngine Desktop Panel - Detect

ZOHO ManageEngine desktop panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZOHO ManageEngine desktop panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZOHO ManageEngine Desktop Panel...

mantisbt - Anonymous Login Detection

mantisbt Anonymous login were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """mantisbt Anonymous login were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mantisbt - Anonymous Login Detection',...

Mapproxy - Detect

Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client. !/usr/bin/env python3 --...

Marqo Vector Search Engine - Detect

Marqo vector search engine was detected. Marqo is an open-source tensor search and vector database that combines vector search with filtering and text/image search for AI applications. !/usr/bin/env python3 -- coding: utf-8 -- """Marqo vector search engine was detected.""" from kittysploit import...

Matomo (Piwik) RUM - Tech Detect

Detects Matomo formerly Piwik Web Analytics & RUM artifacts. Identifies Standard Tracking, Image Tracking, Tag Manager, and Cloud instances using strict matching. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matomo formerly Piwik Web Analytics & RUM artifacts.""" import re from kittysploi...

Mautic CRM Login Panel - Detect

Mautic CRM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Mautic CRM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mautic CRM Login Panel - Detect', 'description':...

MagnusBilling - Login Panel Detection

Identified an exposed MagnusBilling login panel. !/usr/bin/env python3 -- coding: utf-8 -- """Identified an exposed MagnusBilling login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MagnusBilling - Login Pan...

McAfee ePolicy Orchestrator - Arbitrary File Upload Detection

McAfee ePolicy Orchestrator ePO is vulnerable to a ZipSlip vulnerability which allows arbitrary file upload when archives are unpacked if the names of the packed files are not properly sanitized. An attacker can create archives with files containing "../" in their names, making it possible to...

mCloud Panel - Installer Detection

mCloud installer was detected. !/usr/bin/env python3 -- coding: utf-8 -- """mCloud installer was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'mCloud Panel - Installer Detection', 'description': 'mCloud...

MeterSphere Login Panel - Detect

MeterSphere login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MeterSphere login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name':...

MetInfo <=6.1.0 - Local File Inclusion Detection

MetInfo 6.0.0 through 6.1.0 is vulnerable to local file inclusion and allows remote unauthenticated attackers access to locally stored files and their content. !/usr/bin/env python3 -- coding: utf-8 -- """MetInfo 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Mezzanine CMS - Detect

Detects instances of Mezzanine CMS based on unique fingerprints and identifiers. !/usr/bin/env python3 -- coding: utf-8 -- """Detects instances of Mezzanine CMS based on unique fingerprints and identifiers.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Micro Focus iPrint Appliance - Detect

Micro Focus iPrint Appliance was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus iPrint Appliance was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus iPrint Appliance - Detect...

Micro Focus Application Lifecycle Management - Panel Detection

Micro Focus Application Lifecycle Management login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Application Lifecycle Management login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Microsoft Azure Web App - Error 404 Detection

Detects Microsoft Azure Web App - Error 404. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Azure Web App - Error 404.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Azure Web App - Error 4...

Microsoft Internet Information Services 8 Detection

Detects Microsoft Internet Information Services 8. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Internet Information Services 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Internet...

MikroTik httpproxy Detection

Detects MikroTik httpproxy. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MikroTik httpproxy.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MikroTik httpproxy Detection', 'description': 'Detects MikroTik...