WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusion Detection

WordPress 99 Robots WP Background Takeover Advertisements 4.1.4 is susceptible to local file inclusion via exports/download.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress 99 Robots WP Background Takeover Advertisements 4.""" from kittysploit import from lib.protocols.http.httpclient...

WordPress Google Maps <7.11.18 - SQL Injection Detection

WordPress Google Maps plugin before 7.11.18 contains a SQL injection vulnerability. The plugin includes /class.rest-api.php in the REST API and does not sanitize field names before a SELECT statement. An attacker can possibly obtain sensitive information from a database, modify data, and execute...

Shopware < 5.5.8 - Cross-Site Scripting Detection

Shopware before 5.5.8 contains a reflected cross-site scripting XSS caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim...

WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion Detection

WordPress Nevma Adaptive Images plugin before 0.6.67 allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Nevma Adaptive Images plugin before 0."""...

L-Soft LISTSERV <16.5-2018a - Cross-Site Scripting Detection

L-Soft LISTSERV before 16.5-2018a contains a reflected cross-site scripting vulnerability via the /scripts/wa.exe OK parameter. !/usr/bin/env python3 -- coding: utf-8 -- """L-Soft LISTSERV before 16.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress My Calendar <= 3.1.9 - Cross-Site Scripting Detection

WordPress plugin My Calendar = 3.1.9 is susceptible to reflected cross-site scripting which can be triggered via unescaped usage of URL parameters in multiple locations throughout the site. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin My Calendar = 3.""" from kittysploit import...

ND Booking < 2.5 - Unauthenticated Options Change Detection

The Hotel Booking WordPress plugin ND Booking 2.5 was affected by an Unauthenticated Options Change security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Hotel Booking WordPress plugin ND Booking 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

rConfig 3.9.2 - Remote Code Execution Detection

rConfig 3.9.2 is susceptible to a remote code execution vulnerability. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution...

WordPress Checklist <1.1.9 - Cross-Site Scripting Detection

WordPress Checklist plugin before 1.1.9 contains a cross-site scripting vulnerability. The fill parameter is not correctly filtered in the checklist-icon.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Checklist plugin before 1.""" from kittysploit import from...

Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting Detection

Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Rumpus FTP Web File Manager 8.""" from kittysploit...

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization Detection

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

LabKey Server Community Edition <18.3.0 - Cross-Site Scripting Detection

LabKey Server Community Edition before 18.3.0-61806.763 contains a reflected cross-site scripting vulnerability via the onerror parameter in the /r2/query endpoints, which allows an unauthenticated remote attacker to inject arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """LabKey...

LabKey Server Community Edition <18.3.0 - Open Redirect Detection

LabKey Server Community Edition before 18.3.0-61806.763 contains an open redirect vulnerability via the /r1/ returnURL parameter, which allows an attacker to redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations...

webp_server_go 0.4.0 - Path Traversal Detection

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """webpservergo 0.""" import re from kittysploit...

WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting Detection

WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the 'mapid' parameter before outputting it back in the "Bad mapid" error message, leading to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin MapPress before version 2.""" fro...

microweber 1.2.18 - Cross-site Scripting Detection

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.""" from kittysploit import from lib.protocols.http.httpclient...

Apache ShardingSphere ElasticJob-UI privilege escalation Detection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval Detection

WordPress Email Subscribers & Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative...

WordPress Ad Inserter <2.7.10 - Cross-Site Scripting Detection

WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. It does not sanitize and escape the htmlelementselection parameter before outputting it back in the page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Ad Inserter plugin before 2.""" from kittysplo...

WordPress Gallery <2.0.0 - Cross-Site Scripting Detection

WordPress Gallery plugin before 2.0.0 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8...

WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure Detection

WordPress Simply Schedule Appointments plugin before 1.5.7.7 is susceptible to information disclosure. The plugin is missing authorization in a REST endpoint, which can allow an attacker to retrieve user details such as name and email address. !/usr/bin/env python3 -- coding: utf-8 -- """WordPres...

Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI Detection

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

Fortra GoAnywhere MFT - Authentication Bypass Detection

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication bypass in Fortra's GoAnywhere MFT prior to 7.""" from kittysploit import from...

Spring Boot Health Actuator Panel - Detect

Spring Boot Health Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Health Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import validatespringjsonprobe from...

Weak Content Security Policy - Detect

Detected misconfigured CSP directives containing unsafe and overly permissive keywords that weakened resource loading restrictions. This configuration allowed high-risk script behaviors, resulting in reduced protection against XSS attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...

D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)

Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...

dotAdmin Login Panel- Detect

dotAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """dotAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'dotAdmin Login Panel- Detect', 'description': 'dotAdm...

Sangfor Application download.php - Arbitary File Read Detection

There is an arbitrary file reading vulnerability in the Sangfor Application download.php. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the Sangfor Application download.""" import re from kittysploit import from lib.protocols.http.httpclient impo...

Wordpress - Path Disclosure Detection

Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users.""" from kittysploit import fro...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

Office Suite Premium < 10.9.1.42602 - Cross-Site Scripting Detection

Office Suite is suffering from an XSS vulnerability in the following parameter /api?path=files&id. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it. !/usr/bin/env python3 -- coding: utf-8 -- """Office Suite is suffering from an XSS...

Senayan Library Management System v9.4.0(SLIMS 9) - Cross Site Scripting Detection

SLIMS 9 was discovered to contain destination request parameter that copies the value of an HTML tag attribute which is encapsulated in double quotation marks. !/usr/bin/env python3 -- coding: utf-8 -- """SLIMS 9 was discovered to contain destination request parameter that copies the value of an...

PyLoad Login - Panel Detection

A Pyload Login was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Pyload Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PyLoad Login - Panel Detection', 'description': 'A Pyload Login w...

Kingdee EAS - Local File Inclusion Detection

Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive server information. !/usr/bin/env python3 -- coding: utf-8 -- """Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive s.""" from...

Brute Ratel C4 - Detect

Brute Ratel C4 BRc4 is a legit red-teaming tool designed from the ground up with evasion capabilities in mind, but in the wrong hands can cause significant damage. Learn how to protect your organization with our Brute Ratel C4 Spotlight. !/usr/bin/env python3 -- coding: utf-8 -- """Brute Ratel C4...

Apache Struts setup in Debug-Mode Detection

Apache Struts debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts setup in Debug-Mode Detection',...

Reflected Odoo - Open Redirect Detection

Detected an open redirect vulnerability in Odoo where the redirect parameter in web/login was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Odoo where the...

Zammad Helpdesk Panel - Detect

Zammad is an open source helpdesk and customer support system that provides ticket management, live chat, and knowledge base functionality. This template detects exposed Zammad installations. !/usr/bin/env python3 -- coding: utf-8 -- """Zammad is an open source helpdesk and customer support syste...

Quilium Panel - Detect

Quilium CMS Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Quilium CMS Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Quilium Panel - Detect', 'description': 'Quiliu...

Tenemos T24 Login Panel - Detect

Tenemos T24 products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tenemos T24 products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tenemos T24 Login Panel - Detect', 'description':...

Joomla - User Registration Enabled Detection

Detected Joomla user registration enabled, allowing anyone to create accounts on the site. If not intentionally configured, this could lead to unauthorized access or spam account creation. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Joomla user registration enabled, allowing anyone to...

File Browser Login Panel - Detect

Detects File Browser Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects File Browser Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'File Browser Login Panel - Detect',...

Hoteldruid Management Panel Access Detection

A vulnerability in Hoteldruid Panel allows remote unauthenticated users access to the management portal without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Hoteldruid Panel allows remote unauthenticated users access to the management portal withou.""" from...

SumoWebTools Installer Exposure Detection

SumoWebTools is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """SumoWebTools is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Palo Alto Expedition Project Login - Detect

Palo Alto Expedition Project login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Palo Alto Expedition Project login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Palo Alto...

Unauthenticated Mercurial Detect

Mercurial repositories index is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """Mercurial repositories index is disclosed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unauthenticated Mercurial Detect',...

temBoard Panel - Detect

temBoard was detected — a powerful management tool for PostgreSQL. !/usr/bin/env python3 -- coding: utf-8 -- """temBoard was detected — a powerful management tool for PostgreSQL.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Wowza Streaming Engine Manager Panel - Detect

Wowza Streaming Engine Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wowza Streaming Engin...

Appwrite Login Panel - Detect

Appwrite login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Appwrite login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name': 'Appwrite...

GotWeb Detect

Game of Trees Got is a version control system which prioritizes ease of use and simplicity over flexibility. !/usr/bin/env python3 -- coding: utf-8 -- """Game of Trees Got is a version control system which prioritizes ease of use and simplicity over flexibility.""" from kittysploit import from...