Atlassian Bitbucket Public Repository Exposure Detection

Bitbucket Public Repository is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Bitbucket Public Repository is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Atlassian Bitbucket Public Repository...

ESPHome Web Server access - Unauthenticated Access Detection

ESPHome is a powerful smart home devices with simple YAML configuration. !/usr/bin/env python3 -- coding: utf-8 -- """ESPHome is a powerful smart home devices with simple YAML configuration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Wing FTP Service - Detect

The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol that transfers computer files between a...

Spring Boot Scheduledtasks Actuator Panel - Detect

Spring Boot Scheduledtasks Actuator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Boot Scheduledtasks Actuator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Spring Boot...

Micro Focus Vibe Login Panel - Detect

Micro Focus Vibe login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Micro Focus Vibe login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Micro Focus Vibe Login Panel - Detect...

Authentication.asmx - Detect

Authentication Web Service authentication.asmx file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Authentication Web Service authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Microsoft FTP Service Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

Detect Dell iDRAC7

Detected The Integrated Dell Remote Access Controller, iDRAC is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers. !/usr/bin/env python3 -- coding: utf-8 -- """Detected The Integrated Dell Remote Access...

Vaultwarden Login Panel - Detect

Vaultwarden products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vaultwarden products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vaultwarden Login Panel - Detect', 'description':...

Eset Protect Login Panel - Detect

Login page for Eset Protect !/usr/bin/env python3 -- coding: utf-8 -- """Login page for Eset Protect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Eset Protect Login Panel - Detect', 'description': 'Login page for...

Dradis Professional Edition Login Panel - Detect

Dradis Professional Edition login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dradis Professional Edition login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dradis...

CommuniGate Pro FTP Service - Detect

CommuniGate Pro FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """CommuniGate Pro FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

LaCie Login Panel - Detect

LaCie login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """LaCie login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LaCie Login Panel - Detect', 'description': 'LaCi...

Apache ActiveMQ Detection

Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service client. It provides "Enterprise Features" which in this case means fostering the communication from more than one client or server. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Active...

Hewlett-Packard FTP Service - Detect

Hewlett-Packard FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hewlett-Packard FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

Jupyter Lab - Unauthenticated Access Detection

JupyterLab was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """JupyterLab was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jupyt...

Cherokee HTTPD <=0.5 - Cross-Site Scripting Detection

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. !/usr/bin/env python3 --...

Citrix StoreFront - Cross-Site Scripting Detection

Reflected Cross-Site Scripting issue which is exploitable without authentication. This vulnerability was exploitable through coercing an error message during an XML parsing procedure in the SSO flow. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected Cross-Site Scripting issue which is...

WordPress DB Backup <=4.5 - Local File Inclusion Detection

WordPress Plugin DB Backup 4.5 and possibly prior versions are prone to a local file inclusion vulnerability because they fail to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. !/usr/bin/env...

WordPress DZS-VideoGallery Plugin Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 swfloc or 2 designrand parameter. !/usr/bin/env python3 -- coding: utf-8 --...

webEdition 6.3.8.0 - Directory Traversal Detection

A directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in showTempFile.""" impo...

Last.fm Rotation 1.0 - Path Traversal Detection

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in...

Fonality trixbox - Local File Inclusion Detection

Multiple local file inclusion vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to 1 home/index.php, 2 asteriskinfo/asteriskinfo.php, 3 repo/repo.php, or 4 endpointcfg/endpointcfg.php in maint/modules/. !/usr/bin/env python3 ...

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

VelotiSmart Wifi - Directory Traversal Detection

VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80. !/usr/bin/env python3 -- coding: utf-8 -- """VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.""" import re...

Fortinet FortiOS - Cross-Site Scripting Detection

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. !/usr/bin/env python3 -- coding:...

Webgrind <= 1.5 - Local File Inclusion Detection

Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem that the webserver user has access to via an index.php?op=fileviewer&file= URI !/usr/bin/env python3 -- coding: utf-8 -- """Webgrind 1.""" import re from kittysploit import from...

Spring MVC Framework - Local File Inclusion Detection

Spring MVC Framework versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported are vulnerable to local file inclusion because they allow applications to configure Spring MVC to serve static resources e.g. CSS, JS, images. A malicious user can send a request using a...

SV3C HD Camera L Series - Open Redirect Detection

SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtai...

Joomla! Component Sweetykeeper 1.5 - Local File Inclusion Detection

A directory traversal vulnerability in the Sweety Keeper comsweetykeeper component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """...

Joomla! Component Address Book 1.5.0 - Local File Inclusion Detection

A directory traversal vulnerability in the AddressBook comaddressbook component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Joomla! Component Horoscope 1.5.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Daily Horoscope comhoroscope component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Joomla! Component Photo Battle 1.0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the Photo Battle comphotobattle component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Photo Battle comphotobatt...

Joomla! Component VJDEO 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the VJDEO comvjdeo component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the VJDEO...

Joomla! Component LoginBox - Local File Inclusion Detection

A directory traversal vulnerability in the LoginBox Pro comloginbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the LoginBox Pro...

Joomla! Component Juke Box 1.7 - Local File Inclusion Detection

A directory traversal vulnerability in the JOOFORGE Jutebox comjukebox component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in t...

Joomla! Component News Portal 1.5.x - Local File Inclusion Detection

A directory traversal vulnerability in the iJoomla News Portal comnewsportal component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in t...

Joomla! Component Picasa 2.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Joomla! Component User Status - Local File Inclusion Detection

A directory traversal vulnerability in userstatus.php in the User Status comuserstatus component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion Detection

A directory traversal vulnerability in the GCalendar comgcalendar component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component com_jcollection - Directory Traversal Detection

A directory traversal vulnerability in the JCollection comjcollection component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JCollectio...

Joomla! Component com_jashowcase - Directory Traversal Detection

A directory traversal vulnerability in the JA Showcase comjashowcase component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a jashowcase action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component com_jvideodirect - Directory Traversal Detection

Directory traversal vulnerability in the jVideoDirect comjvideodirect component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in the jVideoDirect...

Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the iNetLanka Multiple root commultiroot component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component BeeHeard 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component OrgChart 1.0.0 - Local File Inclusion Detection

A directory traversal vulnerability in the OrgChart comorgchart component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the OrgChart...

Joomla! Component Online Market 2.x - Local File Inclusion Detection

A directory traversal vulnerability in the Online Market commarket component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component Online Exam 1.5.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Online Examination aka Online Exam or comonlineexam component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Joomla! Component SmartSite 1.0.0 - Local File Inclusion Detection

A directory traversal vulnerability in the SmartSite comsmartsite component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the SmartSit...