Moleculer Microservices Project Detection

Moleculer microservice was able to be accessed with no required authentication in place. !/usr/bin/env python3 -- coding: utf-8 -- """Moleculer microservice was able to be accessed with no required authentication in place.""" from kittysploit import from lib.protocols.http.httpclient import...

Atlassian Confluence <5.8.17 - Information Disclosure Detection

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. !/usr/bin/env python3 -- coding: utf-8 --...

Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion Detection

Zeta Producer Desktop CMS before 14.2.1 is vulnerable to local file inclusion if the plugin "filebrowser" is installed because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Zeta Producer Desktop CMS before 14.""" import r...

Joomla! Component Canteen 1.0 - Local File Inclusion Detection

A SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A SQL injection vulnerability in menu.""" import re from...

Fonality trixbox - Local File Inclusion Detection

Multiple local file inclusion vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to 1 home/index.php, 2 asteriskinfo/asteriskinfo.php, 3 repo/repo.php, or 4 endpointcfg/endpointcfg.php in maint/modules/. !/usr/bin/env python3 ...

Bitrix Site Manager - Log File Disclosure Detection

Detected Bitrix Site Manager log files, potentially exposing sensitive information including database credentials, file paths, SQL queries, and user session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Bitrix Site Manager log files, potentially exposing sensitive information...

Barracuda SSL VPN Log In Detection

The Barracuda SSL VPN is an integrated hardware and software solution enabling secure, clientless remote access to internal network resources from any web browser. !/usr/bin/env python3 -- coding: utf-8 -- """The Barracuda SSL VPN is an integrated hardware and software solution enabling secure,...

GitLab public signup Detection

Detects GitLab public signup. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public signup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public signup Detection', 'description': 'Detects GitLab...

Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection

Wireless Multiplex Terminal Playout Server =20.2.8 has a default account with a password of pokon available via its web administrative interface. !/usr/bin/env python3 -- coding: utf-8 -- """Wireless Multiplex Terminal Playout Server =20.""" from kittysploit import from...

SpaceLogic C-Bus Home Panel - Detect

Detects SpaceLogic C-Bus Home Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpaceLogic C-Bus Home Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpaceLogic C-Bus Home Panel -...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect Detection

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. !/usr/bin/env python3 -- coding: utf-8 -- """Polarisft Intellect Core Banking Software Version 9.""" import re from...

XWiki < 4.10.20 - Remote code execution Detection

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

Axigen Mail Server Filename Directory Traversal Detection

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in an edi...

Craft CMS - Log File Disclosure Detection

Detected exposed Craft CMS log files due to misconfiguration, allowing unauthenticated access to sensitive information including error messages, stack traces, database queries, and potentially credentials or session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Craft CMS log...

activecollab detect

Detects activecollab detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects activecollab detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'activecollab detect', 'description': 'Detects activecollab...

Joomla! Component Picasa 2.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Acrolinx Dashboard Detection

An Acrolinx Analytics dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Acrolinx Analytics dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Dashboard Detection',...

Joomla! Component com_kp - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion Detection

SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. dot dot in the path parameter to /Catalog, aka SAP Security Note 2230978. !/usr/bin/env python3 -- coding: utf-8...

Oracle E-Business Suite - Blind SSRF Detection

Oracle E-Business Suite, Application Management Pack component User Monitoring subcomponent, is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform...

Wordpress DB Repair Exposed Detection

Discover enabled Wordpress repair page. !/usr/bin/env python3 -- coding: utf-8 -- """Discover enabled Wordpress repair page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress DB Repair Exposed Detection',...

Apache Tika - Detection

Detects an Apache Tika server, a toolkit that detects and extracts metadata and text from over a thousand different file types such as PPT, XLS, and PDF. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an Apache Tika server, a toolkit that detects and extracts metadata and text from over a...

SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation Detection

SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Email Security version 10.""" from kittysploit import from lib.protocols.http.httpclient...

WordPress AcyMailing <7.5.0 - Open Redirect Detection

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...

Cacti - Cross-Site Scripting Detection

Cacti contains a cross-site scripting vulnerability via "http:///authchangepassword.php?ref=alert1" which can successfully execute the JavaScript payload present in the "ref" URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Cacti contains a cross-site scripting vulnerability via...

Jenkins build-metrics 1.3 - Cross-Site Scripting Detection

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins build-metrics 1.""" from kittysploit import from...

PhpMyAdmin Scripts - Remote Code Execution Detection

PhpMyAdmin Scripts 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 are susceptible to a remote code execution in setup.php that allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. Combined with the ability to save files on server, this can allow...

WordPress Visualizer <3.3.1 - Cross-Site Scripting Detection

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard...

Artica Web Proxy Detect

Detects Artica Web Proxy Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Artica Web Proxy Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Artica Web Proxy Detect', 'description': 'Detects Artica...

ASP.NET Launch Settings - Exposure Detection

Detected exposed launchSettings.json files in ASP.NET Core applications. This file contains environment variables and launch configurations that may leak sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed launchSettings.""" from kittysploit import from...

cgit Web Interface - Detection

Detects cgit web interface for Git repositories. cgit is a hyperfast web frontend for Git repositories written in C. It provides a web-based interface to browse Git repositories, view commits, diffs, and files. cgit is designed to be publicly accessible for open source projects. However, detectin...

Acrolinx Server <5.2.5 - Local File Inclusion Detection

Acrolinx Server prior to 5.2.5 suffers from a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Acrolinx Server prior to 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Acrolinx Serv...

Chyrp 2.x - Local File Inclusion Detection

A directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2011-2744. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerabilit...

Apache Sling - Detect

Detects a Apache Sling, a Java-based web framework designed for content-centric applications, using a RESTful approach to map URL requests directly to resources in a Java Content Repository JCR. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Sling, a Java-based web framework design...

Bottle debug mode enabled Detection

Detects Bottle debug mode enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Bottle debug mode enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bottle debug mode enabled Detection', 'description':...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion Detection

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Edition 3."""...

Apache Druid Unauth Detection

Apache Druid is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Druid is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Druid Unauth Detection',...

AKHQ Panel Detection

Detects AKHQ Kafka HQ login UI exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AKHQ Kafka UI panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AKHQ Panel Detection", "description": "Detects AKHQ...

WordPress Mail Masta 1.0 - Local File Inclusion Detection

WordPress Mail Masta 1.0 is susceptible to local file inclusion in countofsend.php and csvexport.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Mail Masta 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Joomla! Component Jstore - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

AdminBro Dashboard - Unauthenticated Access Detection

Detected AdminBro/AdminJS admin panel was exposed without authentication, allowing unauthenticated users to access the admin dashboard and potentially view, modify, or delete sensitive data. This misconfiguration occurred when developers used buildRouter instead of buildAuthenticatedRouter...

Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion Detection

Patreon WordPress before version 1.7.0 is vulnerable to unauthenticated local file inclusion that could be abused by anyone visiting the site. Exploitation by an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the...

WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload Detection

WordPress Fancy Product Designer plugin before 4.6.9 is susceptible to an arbitrary file upload. An attacker can upload malicious files and execute code on the server, modify data, and/or gain full control over a compromised system without authentication. !/usr/bin/env python3 -- coding: utf-8 --...

VMware - Local File Inclusion Detection

VMware Workspace ONE Access, Identity Manager, and Realize Automation are vulnerable to local file inclusion because they contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access withou...

XWiki >= 13.10.8 - Cross-Site Scripting Detection

Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript.""" from kittysploit import from...

Jenzabar 9.2x-9.2.2 - Cross-Site Scripting Detection

Jenzabar 9.2.x through 9.2.2 contains a cross-site scripting vulnerability. It allows /ics?tool=search&query. !/usr/bin/env python3 -- coding: utf-8 -- """Jenzabar 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Apache Zeppelin detect

Detects Apache Zeppelin detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Zeppelin detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Zeppelin detect', 'description': 'Detects Apache...

Linksys E2000 1.0.06 position.js Improper Authentication Detection

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file. !/usr/bin/env python3 -- coding: utf-8 -- """Linksys E2000 Ver.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Linksy...

Unauthenticated Popup File Upload - Detect

Endpoints where files can be uploaded without authentication were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Endpoints where files can be uploaded without authentication were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Balada Injector Malware - Detect

Checks websites for Balada Injector malware. !/usr/bin/env python3 -- coding: utf-8 -- """Checks websites for Balada Injector malware.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Balada Injector Malware...