Cloudlog Panel - Detect

Cloudlog panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cloudlog panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloudlog Panel - Detect', 'description': 'Cloudlog panel was...

Cloud Config File Exposure Detection

Cloud Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Cloud Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cloud Config File Exposure Detection', 'description': 'Cloud...

Google Cloud Run Default Page Detection

Detects Google Cloud Run Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Google Cloud Run Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Cloud Run Default Page Detection',...

Cobbler WebGUI Login Panel - Detect

Cobbler WebGUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cobbler WebGUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cobbler WebGUI Login Panel - Detect',...

CockroachDB Unauthenticated Console Exposure Detection

Unauthenticated access to the CockroachDB console allows viewing the cluster nodes and server version. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated access to the CockroachDB console allows viewing the cluster nodes and server version.""" from kittysploit import from...

Code42 Panel - Detect

Code42 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Code42 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Code42 Panel - Detect', 'description': 'Code42 panel was detected.',...

Codeigniter Application Installer Exposure Detection

Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Codeigniter Application is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from...

CodeKit Configuration Exposure Detection

Detected exposed CodeKit configuration files that may have revealed sensitive project information, including file paths, build settings, hooks, and project structure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed CodeKit configuration files that may have revealed sensitive project...

Adobe ColdFusion - Cross-Site Scripting Detection

Adobe ColdFusion debug page contains a cross-site scripting vulnerability when the application is running on a remote host. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Coming Soon Page Detect

Detects Coming Soon Page Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Coming Soon Page Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Coming Soon Page Detect', 'description': 'Detects Coming...

Commvault Web Console Panel - Detect

Commvault web console login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Commvault web console login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Commvault Web Console Panel...

ConnectWise Server Backup Manager SE Panel - Detect

ConnectWise Server Backup Manager SE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ConnectWise Server Backup Manager SE login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

ContaCam Snapshot Images - Detect

ContaCam snapshot images were detected. !/usr/bin/env python3 -- coding: utf-8 -- """ContaCam snapshot images were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ContaCam Snapshot Images - Detect',...

ContentKeeper Cloud Panel - Detect

ContentKeeper Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ContentKeeper Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ContentKeeper Cloud Panel - Detect',...

Covenant C2 - Detect

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier,and serve as a collaborative command and control platform for red teamers. !/usr/bin/env python3 -- coding: utf-8 -- """Covenant is a .""" from...

cPanel Configuration - File Disclosure Detection

cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel configuration file is exposed and accessible, potentially leading to sensitive information disclosure.""" from kittysploit import from...

Craft CMS - Log File Disclosure Detection

Detected exposed Craft CMS log files due to misconfiguration, allowing unauthenticated access to sensitive information including error messages, stack traces, database queries, and potentially credentials or session data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Craft CMS log...

CudaTel Login Panel - Detect

CudaTel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CudaTel login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CudaTel Login Panel - Detect', 'description': 'CudaTel...

XOOPS Custom - Installation Detection

Detects the presence of XOOPS Custom installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of XOOPS Custom installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'XOOPS Custo...

PhpMyAdmin Scripts - Remote Code Execution Detection

PhpMyAdmin Scripts 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 are susceptible to a remote code execution in setup.php that allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. Combined with the ability to save files on server, this can allow...

Joomla! Component com_cartweberp - Local File Inclusion Detection

A directory traversal vulnerability in the CARTwebERP comcartweberp component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Joomla! Component com_abbrev - Local File Inclusion Detection

A directory traversal vulnerability in the Abbreviations Manager comabbrev component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component com_janews - Local File Inclusion Detection

A directory traversal vulnerability in the JA News comjanews component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA News...

Joomla! Component DW Graph - Local File Inclusion Detection

A directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs comdwgraphs component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

Joomla! Component Picasa 2.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Joomla! Component Highslide 1.5 - Local File Inclusion Detection

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in th...

Joomla! Component com_jresearch - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Joomla! Component Cookex Agency CKForms - Local File Inclusion Detection

A directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in th...

Joomla! Component Advertising 0.25 - Local File Inclusion Detection

A directory traversal vulnerability in the Advertising comadvertising component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component redSHOP 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the redSHOP comredshop...

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion Detection

A directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8...

Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the TRAVELbook comtravelbook component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component com_blog - Directory Traversal Detection

A directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in index.""" import re fr...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect Detection

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...

Joomla! Component Archery Scores 1.0.6 - Local File Inclusion Detection

A directory traversal vulnerability in archeryscores.php in the Archery Scores comarcheryscores component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """...

Joomla! Component jesectionfinder - Local File Inclusion Detection

A directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8...

Joomla! Component Music Manager - Local File Inclusion Detection

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI) Detection

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

GRAND FlAGallery 1.57 - Cross-Site Scripting Detection

A cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS...

Joomla! Component com_kp - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Axigen Mail Server Filename Directory Traversal Detection

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in an edi...

WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting Detection

A cross-site scripting vulnerability in js/taloaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter." !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Xibo 1.2.2/1.4.1 - Directory Traversal Detection

A directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in Spring Signage...

DomPHP 0.83 - Directory Traversal Detection

A directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impacts via a .. dot dot in the url parameter to photoalbum/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in DomPHP 0.""" import re from...

Shortcode Ninja <= 1.4 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Simple Online Planning Tool <1.3.2 - Local File Inclusion Detection

SOPlanning 1.32 contain a directory traversal in the filegetcontents function via a .. dot dot in the fichier parameter. !/usr/bin/env python3 -- coding: utf-8 -- """SOPlanning 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress MyPixs <=0.3 - Local File Inclusion Detection

WordPress MyPixs 0.3 and prior contains a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress MyPixs 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress MyPix...

WordPress Church Admin <0.810 - Cross-Site Scripting Detection

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin plugin before 0.""" from kittysploit...

Nordex NC2 - Cross-Site Scripting Detection

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks...

mTheme Unus < 2.3 - Directory Traversal Detection

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. !/usr/bin/env python3 -- coding: utf-8 -- """The mTheme-Unus theme for...