Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion Detection

Portal do Software Publico Brasileiro i3geo 7.0.5 is vulnerable to local file inclusion in the component codemirror.php, which allows attackers to execute arbitrary PHP code via a crafted HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo 7."""...

MSNSwitch Firmware MNT.2408 - Authentication Bypass Detection

MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh. An attacker can arbitrarily configure settings, leading to possible remote code execution and subsequent unauthorized operations. !/usr/bin/env python3 -- coding:...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the 'msg' parameter, which is inserted into the document with insufficient sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """WWBN AVideo 11.""" from kittysploit import from...

Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure Detection

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. !/usr/bin/env python3 -- coding: utf-8 -- """Digital Watchdog DW Spectrum Server 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

RStudio Connect - Open Redirect Detection

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites. !/usr/bin/env python3 -- coding: utf-8 -- """RStudio Connect prior to 2023.""" import re from kittysploit import from...

Zaver - Local File Inclusion Detection

Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. !/usr/bin/env python3 -- coding: utf-8 -- """Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.""" import re from kittysploit import from lib.protocols.http.httpclient import...

RaspAP 2.8.7 - Unauthenticated Command Injection Detection

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfgid parameter in /ajax/openvpn/activateovpncfg.php and /ajax/openvpn/delovpncfg.php. !/usr/bin/env python3 -- coding: utf-8 -- """A Command injection vulnerability...

Phpmyfaq v3.1.11 - Cross-Site Scripting Detection

Phpmyfaq v3.1.11 is vulnerable to reflected XSS in send2friend because the 'artlang' parameter is not sanitized. !/usr/bin/env python3 -- coding: utf-8 -- """Phpmyfaq v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Adobe Connect < 12.1.5 - Local File Disclosure Detection

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

Cellinx NVT Web Server - Local File Disclosure Detection

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Cellinx NVT v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

L-Soft LISTSERV 16.5 - Cross-Site Scripting Detection

The REPORT after z but before a parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """The REPORT after z but before a parameter in wa.""" from kittysploit import from...

Adobe ColdFusion - Access Control Bypass Detection

An attacker is able to access every CFM and CFC endpoint within the ColdFusion Administrator path /CFIDE/, of which there are 437 CFM files and 96 CFC files in a ColdFusion 2021 Update 6 install. !/usr/bin/env python3 -- coding: utf-8 -- """An attacker is able to access every CFM and CFC endpoint...

OpenEMR < 7.0.1 - Cross-site Scripting Detection

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.""" from kittysploit import from lib.protocols.http.httpclient import...

SolarView Compact <= 6.00 - Local File Inclusion Detection

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary read file vulnerability in SolarView Compact 6.""" from kittysploit import...

OURPHP <= 7.2.0 - Cross Site Scripting Detection

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php. !/usr/bin/env python3 -- coding: utf-8 -- """OURPHP = 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OURPHP = 7.2.0 - Cros...

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints Detection

The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as movi...

EventON Lite < 2.1.2 - Arbitrary File Download Detection

The plugin does not validate that the eventid parameter in its eventonicsdownload ajax action is a valid Event, allowing unauthenticated visitors to access any Post including unpublished or protected posts content via the ics export functionality by providing the numeric id of the post...

BlogEngine CMS - Open Redirect Detection

Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect !/usr/bin/env python3 -- coding: utf-8 -- """Blogengine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BlogEngine CMS - Open Redirect...

POS Codekop v2.0 - Broken Authentication Detection

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. !/usr/bin/env python3 -- coding: utf-8 -- """A broken authentication mechanism in the endpoint excel.""" from kittysploit import from...

IceWarp Webmail Server v10.2.1 - Cross Site Scripting Detection

Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Icewarp Icearp v10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

FileMage Gateway - Directory Traversal Detection

Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component. !/usr/bin/env python3 -- coding: utf-8 -- """Directory Traversal vulnerability in FileMage Gateway...

IceWarp 11.4.6.0 - Cross-Site Scripting Detection

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the color parameter. !/usr/bin/env python3 -- coding: utf-8 -- """IceWarp 11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

PrestaShop fieldpopupnewsletter Module - Cross Site Scripting Detection

Fieldpopupnewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback parameter at ajax.php. !/usr/bin/env python3 -- coding: utf-8 -- """Fieldpopupnewsletter Prestashop Module v1.""" from kittysploit import from...

PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting Detection

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0. !/usr/bin/env python3 -- coding: utf-8 -- """There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.""" from kittysploit import from...

PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting Detection

PhpJabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter. !/usr/bin/env python3 -- coding: utf-8 -- """PhpJabbers PHP Forum Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

mooSocial 3.1.6 - Reflected Cross Site Scripting Detection

A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability h...

NodeBB XML-RPC Request xmlrpc.php - XML Injection Detection

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. !/usr/bin/env python3 -- coding: utf-8 -- """A remote code execution RCE vulnerability in the xmlrpc."...

SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting Detection

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

qdPM 9.2 - Directory Traversal Detection

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. !/usr/bin/env python3 -- coding: utf-8 -- """qdPM 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'qdPM 9.2 -...

DedeCMS v5.7.111 - Cross-Site Scripting Detection

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php. !/usr/bin/env python3 -- coding: utf-8 -- """DedeCMS v5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

DedeCMS 5.7.87 - Directory Traversal Detection

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Oracle Peoplesoft - Unauthenticated File Read Detection

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Squidex <7.4.0 - Cross-Site Scripting Detection

Squidex before 7.4.0 contains a cross-site scripting vulnerability via the squid.svg endpoint. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 --...

Temenos T24 R20 - Cross-Site Scripting Detection

Temenos T24 release 20 contains a reflected cross-site scripting vulnerability via the routineName parameter at genrequest.jsp. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion Detection

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjFooterNavigationConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site...

PrestaShop TshirteCommerce - Directory Traversal Detection

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. !/usr/bin/env python3 -- coding: utf-8 -- """The Custom...

PrestaShop tshirtecommerce - Directory Traversal Detection

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. !/usr/bin/env python3 -- coding: utf-8 -- """The Custom...

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion Detection

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A Local File inclusion vulnerability in test.""" import re from kittysploit import from...

Repetier Server - Directory Traversal Detection

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier Server through 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Webkul QloApps 1.5.2 - Cross-site Scripting Detection

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and emailcreate parameters in the AuthController.php file. !/usr/bin/env python3 -- coding: utf-8 -- """Cross Site Scripting vulnerability found in Webkil QloAp...

Gibbon v25.0.0 - Local File Inclusion Detection

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. !/usr/bin/env python3 -- coding: utf-8 -- """Gibbon v25.""" from kittysploit import from...

Traggo Server - Local File Inclusion Detection

traggo/server version 0.3.0 is vulnerable to directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """traggo/server version 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traggo Server - Local...

Issabel PBX 4.0.0-6 - Directory Listing Detection

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory !/usr/bin/env python3 -- coding: utf-8 -- """An issue in issabel-pbx v.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Adobe ColdFusion - Access Control Bypass Detection

There is an access control bypass vulnerability in Adobe ColdFusion versions 2023 Update 2 and below, 2021 Update 8 and below and 2018 update 18 and below, which allows a remote attacker to bypass the ColdFusion mechanisms that restrict unauthenticated external access to ColdFusion's Administrato...

MooDating 1.2 - Cross-Site Scripting Detection

A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. !/usr/bin/env python3 -- coding: utf-8...

mooDating 1.2 - Cross-site scripting Detection

A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. !/usr/bin/env python3 -...

WS_FTP Server - Insecure Deserialization Detection

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. !/usr/bin/env python3 -- coding: utf-8 -- """In WSFTP Serve...

PHPJabbers Food Delivery Script - SQL Injection Detection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PHPJabbers Food Delivery Script v3.0 - SQL Injection Detection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. !/usr/bin/env python3 -- coding: utf-8 -- """PHPJabbers Food Delivery Script v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...