Copyparty v1.8.6 - Cross-Site Scripting Detection

Copyparty is a portable file server. Versions prior to 1.8.6 are subject to a reflected cross-site scripting XSS Attack. The vulnerability in the application's web interface could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link. !/usr/bin/e...

Cortex XSOAR Login Panel - Detect

Cortex XSOAR login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cortex XSOAR login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cortex XSOAR Login Panel - Detect',...

Apache CouchDB Fauxton Panel - Detect

Apache CouchDB Fauxton panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache CouchDB Fauxton panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache CouchDB Fauxton Panel - Detect...

cPanel Backup Exclusion Configuration - Exposure Detection

cPanel backup exclusion configuration file cpbackup-exclude.conf was publicly accessible, potentially exposing directory structure and system paths. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel backup exclusion configuration file cpbackup-exclude.""" from kittysploit import from...

cPanel Configuration - File Disclosure Detection

cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import from...

CradlePoint Gateway - Login Panel Detection

CradlePoint an Ericsson company produces cellular-connected SD-WAN and VPN gateway appliances. The web administration interface is commonly exposed on port 8080. !/usr/bin/env python3 -- coding: utf-8 -- """CradlePoint an Ericsson company produces cellular-connected SD-WAN and VPN gateway...

Craft CMS - Log File Disclosure Detection

Detected exposed Craft CMS log files due to misconfiguration, allowing unauthenticated access to sensitive information including error messages, stack traces, database queries, and potentially credentials or session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Craft CMS log...

Craft CMS Detect

Detects Craft CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Craft CMS.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Craft CMS Detect', 'description': 'Detects Craft CMS', 'author': 'KittySploi...

Creatio Login Panel - Detect

Creatio login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Creatio login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Creatio Login Panel - Detect', 'description': 'Creatio...

Credentials File Disclosure Detection

Internal secret file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Internal secret file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Credentials File Disclosure Detection', 'description':...

CRXDE Lite - Exposure Detection

CRXDE Lite exposure was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CRXDE Lite exposure was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CRXDE Lite - Exposure Detection', 'description': 'CRXDE...

Crystal Live HTTP Server 6.01 - Local File Inclusion Detection

Crystal Live HTTP Server 6.01 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Crystal Live HTTP Server 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Crystal Live HTTP Server...

Cornerstone OnDemand Panel - Detect

Cornerstone OnDemand panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cornerstone OnDemand panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cornerstone OnDemand Panel - Detect',...

CubeBackup Setup Page - Exposure Detection

Detects exposed CubeBackup Setup page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed CubeBackup Setup page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CubeBackup Setup Page - Exposure Detection',...

CUPS - Detect

An instance running CUPS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running CUPS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CUPS - Detect', 'description': 'An instance...

Joomla! Component CCNewsLetter - Local File Inclusion Detection

A directory traversal vulnerability in the ccNewsletter comccnewsletter component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a ccnewsletter action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversa...

Joomla! Plugin Core Design Scriptegrator - Local File Inclusion Detection

A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...

Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory...

Joomla! Component com_janews - Local File Inclusion Detection

A directory traversal vulnerability in the JA News comjanews component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA News...

Joomla! Component LoginBox - Local File Inclusion Detection

A directory traversal vulnerability in the LoginBox Pro comloginbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the LoginBox Pro...

Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure Detection

Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true...

Joomla! Component JProject Manager 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Ternaria Informatica JProject Manager comjprojectmanager component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3...

Joomla! Component Advertising 0.25 - Local File Inclusion Detection

A directory traversal vulnerability in the Advertising comadvertising component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion Detection

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Joomla! Component Jfeedback 1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Ternaria Informatica Jfeedback! comjfeedback component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding:...

Joomla! Component AWDwall 1.5.4 - Local File Inclusion Detection

A directory traversal vulnerability in the AWDwall comawdwall component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the AWDwall...

Joomla! Component Matamko 1.01 - Local File Inclusion Detection

A directory traversal vulnerability in the Matamko commatamko component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Matamko...

Joomla! Component redSHOP 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the redSHOP comredshop...

Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the TRAVELbook comtravelbook component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component JA Comment - Local File Inclusion Detection

A directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA Comment...

Joomla! Component Graphics 1.0.6 - Local File Inclusion Detection

A directory traversal vulnerability in graphics.php in the Graphics comgraphics component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component Arcade Games 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Arcad...

Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the MT Fire Eagle commtfireeagle component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component SMEStorage - Local File Inclusion Detection

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component Property - Local File Inclusion Detection

A directory traversal vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion Detection

A directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- codin...

Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal Detection

A directory traversal vulnerability in the Percha Gallery comperchagallery component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -...

Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal Detection

A directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 --...

Joomla! Component jesectionfinder - Local File Inclusion Detection

A directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8...

Joomla! Component PicSell 1.0 - Arbitrary File Retrieval Detection

A directory traversal vulnerability in the PicSell compicsell component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the dflink parameter in a prevsell dwnfree action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component JRadio - Local File Inclusion Detection

A directory traversal vulnerability in JRadio comjradio component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Joomla! Component Jimtawl 1.0.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Jimtawl comjimtawl component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly unspecified other impacts via a .. dot dot in the task parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component Jstore - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal Detection

A directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

Chyrp 2.x - Local File Inclusion Detection

A directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2011-2744. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerabilit...

Joomla! Component com_kp - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Alert Before Your Post <= 0.1.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in postalert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerabilit...

Apache Struts2 S2-008 RCE Detection

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method. !/usr/bin/env python3 -- coding: utf-8...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities Detection

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. !/usr/bin/env...

OpenEMR 4.1 - Local File Inclusion Detection

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the formname parameter to 1 contrib/acog/printform.php; or 2 loadform.php, 3 viewform.php, or 4 trendform.php in interface/patientfile/encounter. !/usr/bin/en...