WordPress Checklist <1.1.9 - Cross-Site Scripting Detection

WordPress Checklist plugin before 1.1.9 contains a cross-site scripting vulnerability. The fill parameter is not correctly filtered in the checklist-icon.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Checklist plugin before 1.""" from kittysploit import from...

Allied Telesis AT-GS950/8 - Local File Inclusion Detection

Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 is susceptible to local file inclusion via its web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Allied Telesis AT-GS950/8 until Firmware AT-S107 V.""" import re from kittysploit import from lib.protocols.http.httpclient import...

WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting Detection

WordPress Hero Maps Premium plugin 2.2.1 and prior contains an unauthenticated reflected cross-site scripting vulnerability via the views/dashboard/index.php p parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Hero Maps Premium plugin 2.""" from kittysploit import from...

Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting Detection

Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Rumpus FTP Web File Manager 8.""" from kittysploit...

TOTOLINK/Realtek Routers - Information Disclosure Detection

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization Detection

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

LabKey Server Community Edition <18.3.0 - Cross-Site Scripting Detection

LabKey Server Community Edition before 18.3.0-61806.763 contains a reflected cross-site scripting vulnerability via the onerror parameter in the /r2/query endpoints, which allows an unauthenticated remote attacker to inject arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """LabKey...

LabKey Server Community Edition <18.3.0 - Open Redirect Detection

LabKey Server Community Edition before 18.3.0-61806.763 contains an open redirect vulnerability via the /r1/ returnURL parameter, which allows an attacker to redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations...

webp_server_go 0.4.0 - Path Traversal Detection

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """webpservergo 0.""" import re from kittysploit...

WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting Detection

WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the 'mapid' parameter before outputting it back in the "Bad mapid" error message, leading to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin MapPress before version 2.""" fro...

Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting Detection

Caldera Forms WordPress plugin 1.9.7 contains a reflected cross-site scripting caused by lack of validation and escaping of the cf-api parameter in responses, letting attackers execute arbitrary scripts in victim's browser, exploit requires attacker to craft a malicious request. !/usr/bin/env...

microweber 1.2.18 - Cross-site Scripting Detection

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.""" from kittysploit import from lib.protocols.http.httpclient...

Apache ShardingSphere ElasticJob-UI privilege escalation Detection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

Zyxel ZyWall UAG/USG - Account Creation Access Detection

Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator via the "Free Time" component. This can lead to unauthorized network access or DoS attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel UAG, USG, and ZyWall...

WPS Hide Login <= 1.5.2.2 - Login Page Bypass Detection

WPS-Hide-Login plugin before 1.5.3 for WordPress contains an action=confirmaction protection bypass, letting attackers bypass security checks, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """WPS-Hide-Login plugin before 1.""" from kittysploit import from...

WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval Detection

WordPress Email Subscribers & Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative...

WordPress Ad Inserter <2.7.10 - Cross-Site Scripting Detection

WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. It does not sanitize and escape the htmlelementselection parameter before outputting it back in the page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Ad Inserter plugin before 2.""" from kittysplo...

Rudloff alltube prior to 3.0.1 - Open Redirect Detection

An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability...

WordPress Gallery <2.0.0 - Cross-Site Scripting Detection

WordPress Gallery plugin before 2.0.0 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8...

WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure Detection

WordPress Simply Schedule Appointments plugin before 1.5.7.7 is susceptible to information disclosure. The plugin is missing authorization in a REST endpoint, which can allow an attacker to retrieve user details such as name and email address. !/usr/bin/env python3 -- coding: utf-8 -- """WordPres...

Metabase Login Panel - Detect

Metabase login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Metabase login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Metabase Login Panel - Detect', 'description':...

Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI Detection

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

Fortra GoAnywhere MFT - Authentication Bypass Detection

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication bypass in Fortra's GoAnywhere MFT prior to 7.""" from kittysploit import from...

Samsung WLAN AP WEA453e - Local File Inclusion Detection

Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Jolokia Detection

Detects Jolokia Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Jolokia Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikejolokiaversion, validatejsonprobe class ModuleScanner, Httpclient: in...

Prometheus Monitoring System - Unauthenticated Detection

Detects unauthenticated access to Prometheus Time Series Collection and Processing Server by checking for specific elements in the response from the /graph endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detects unauthenticated access to Prometheus Time Series Collection and Processing...

Spring Boot Health Actuator Panel - Detect

Spring Boot Health Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Health Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import validatespringjsonprobe from...

Springboot Loggers - Exposure Detection

Springboot Loggers is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Springboot Loggers is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.probeguard import lookslikespringloggers, validatespringjsonprobe class ModuleScanner,...

Weak Content Security Policy - Detect

Detected misconfigured CSP directives containing unsafe and overly permissive keywords that weakened resource loading restrictions. This configuration allowed high-risk script behaviors, resulting in reduced protection against XSS attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected...

D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)

Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...

Apache NiFi - Unauthenticated API Exposure Detection

Detects unauthenticated access to /nifi-api/process-groups/root RCE attack surface when API auth is disabled. Does not confirm command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Apache NiFi is designed for data streaming.""" from kittysploit import from lib.protocols.http.httpclient...

Atlassian Confluence CVE-2023-22515 Detection

Detects CVE-2023-22515 by verifying that setupComplete can be toggled to re-expose the administrator setup form no account creation. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian Confluence CVE-2023-22515 broken access control / setup reset detection.""" from kittysploit import from...

nostromo 1.9.6 - Remote Code Execution Detection

nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd through 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

dotAdmin Login Panel- Detect

dotAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """dotAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'dotAdmin Login Panel- Detect', 'description': 'dotAdm...

Sangfor Application download.php - Arbitary File Read Detection

There is an arbitrary file reading vulnerability in the Sangfor Application download.php. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the Sangfor Application download.""" import re from kittysploit import from lib.protocols.http.httpclient impo...

Webp Server Go - Path Traversal Detection

Webp Server Go has an Path Traversal vulnerability. Attackers can use the vulnerability to access arbitraty file. !/usr/bin/env python3 -- coding: utf-8 -- """Webp Server Go has an Path Traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Wordpress - Path Disclosure Detection

Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users.""" from kittysploit import fro...

Adobe Experience Manager Forms - Panel Detection

Adobe Experience Manager Forms was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager Forms was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Experience Manager Form...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

Office Suite Premium < 10.9.1.42602 - Cross-Site Scripting Detection

Office Suite is suffering from an XSS vulnerability in the following parameter /api?path=files&id. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it. !/usr/bin/env python3 -- coding: utf-8 -- """Office Suite is suffering from an XSS...

Senayan Library Management System v9.4.0(SLIMS 9) - Cross Site Scripting Detection

SLIMS 9 was discovered to contain destination request parameter that copies the value of an HTML tag attribute which is encapsulated in double quotation marks. !/usr/bin/env python3 -- coding: utf-8 -- """SLIMS 9 was discovered to contain destination request parameter that copies the value of an...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...

PyLoad Login - Panel Detection

A Pyload Login was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Pyload Login was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PyLoad Login - Panel Detection', 'description': 'A Pyload Login w...

Kingdee EAS - Local File Inclusion Detection

Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive server information. !/usr/bin/env python3 -- coding: utf-8 -- """Kingdee EAS OA serverfile is vulnerable to local file inclusion and can allow attackers to obtain sensitive s.""" from...

Brute Ratel C4 - Detect

Brute Ratel C4 BRc4 is a legit red-teaming tool designed from the ground up with evasion capabilities in mind, but in the wrong hands can cause significant damage. Learn how to protect your organization with our Brute Ratel C4 Spotlight. !/usr/bin/env python3 -- coding: utf-8 -- """Brute Ratel C4...

OpenShift Assisted Installer Panel - Detect

OpenShift Assisted Installer panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenShift Assisted Installer panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenShift Assisted...

Apache Struts setup in Debug-Mode Detection

Apache Struts debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts setup in Debug-Mode Detection',...

Reflected Odoo - Open Redirect Detection

Detected an open redirect vulnerability in Odoo where the redirect parameter in web/login was abused to redirect users to an attacker-controlled external URL after the authentication flow. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an open redirect vulnerability in Odoo where the...

Zammad Helpdesk Panel - Detect

Zammad is an open source helpdesk and customer support system that provides ticket management, live chat, and knowledge base functionality. This template detects exposed Zammad installations. !/usr/bin/env python3 -- coding: utf-8 -- """Zammad is an open source helpdesk and customer support syste...

Quilium Panel - Detect

Quilium CMS Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Quilium CMS Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Quilium Panel - Detect', 'description': 'Quiliu...