PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting Detection

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely...

PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting Detection

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. !/usr/bin/env python3 -- coding: utf-8 -- """The attacker can send to victim a link containing ...

Qlik Sense Enterprise - Path Traversal Detection

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

JFinalCMS v5.0.0 - Directory Traversal Detection

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in the component /common/DownController.""" import re from kittysploit import from lib.protocols.http.httpclient impor...

Adlisting Classified Ads 2.14.0 - Information Disclosure Detection

Information disclosure issue in the redirect responses, When accessing any page on the website, Sensitive data, such as API keys, server keys, and app IDs, is being exposed in the body of these redirects. !/usr/bin/env python3 -- coding: utf-8 -- """Information disclosure issue in the redirect...

OpenCMS - Cross-Site Scripting Detection

OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """OpenCMS below 10.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenCMS - Cross-Site Scripting...

MooSocial 3.1.8 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exisits in multiple url of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting XSS vulnerability...

mojoPortal v.2.7.0.0 - Cross-Site Scripting Detection

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component. !/usr/bin/env python3 -- coding: utf-8 -- """Cross Site Scripting vulnerability in mojoPortal v.""" from kittysploit import from...

Ruijie RG-EW1200G Router Background - Login Bypass Detection

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

mooSocial v.3.1.8 - Cross-Site Scripting Detection

Cross-Site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-Site Scripting XSS vulnerability in mooSocial v.""" fr...

MooSocial 3.1.8 - Cross-Site Scripting Detection

A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scriptin...

PlayTube 3.0.1 - Information Disclosure Detection

A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. !/usr/bin/env python3 -- coding: utf-8 -- """A...

AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion Detection

AVEVA InTouch Access Anywhere Secure Gateway is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """AVEVA InTouch Access Anywhere Secure Gateway is vulnerable to local file inclusion.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Casdoor 1.13.0 - Unauthenticated SQL Injection Detection

Casdoor version 1.13.0 suffers from a remote unauthenticated SQL injection vulnerability via the query API in Casdoor before 1.13.1 related to the field and value parameters, as demonstrated by api/get-organizations. !/usr/bin/env python3 -- coding: utf-8 -- """Casdoor version 1.""" import re fro...

FreeIPA - XML Entity Injection Detection

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. !/usr/bin/env python3 -- coding: utf-8 -- """Access to external...

PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting Detection

PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. !/usr/bin/env python3 -- coding: utf-8 -- """PKP Open Journal Systems 2.""" from kittysploit import from...

VoipMonitor - Pre-Auth SQL Injection Detection

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level. !/usr/bin/env python3 -- coding: utf-8 -- """A SQL injection vulnerability in Voipmonitor GUI before v24.""" from kittysploit import from lib.protocols.http.httpclien...

AudioCodes Device Manager Express - SQL Injection Detection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in AudioCodes Device Manager Express through 7."...

WordPress Transposh <=1.0.8.1 - Information Disclosure Detection

WordPress Transposh plugin through is susceptible to information disclosure via the AJAX action tphistory, which is intended to return data about who has translated a text given by the token parameter. However, the plugin also returns the user's login name as part of the userlogin attribute. If a...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection Detection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

Cuppa CMS v1.0 - Local File Inclusion Detection

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. !/usr/bin/env python3 -- coding: utf-8 -- """CuppaCMS v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

WordPress Duplicator <1.4.7 - Authentication Bypass Detection

WordPress Duplicator plugin before 1.4.7 is susceptible to authentication bypass. The plugin discloses the URL of the backup to unauthenticated visitors accessing the main installer endpoint. If the installer script has been run once by an administrator, this allows download of the full site back...

Duplicator < 1.4.7.1 - Information Disclosure Detection

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. !/usr/bin/env python3 -- coding: utf-8 -- """The Duplicator WordPress plugin before...

Ametys CMS Information Disclosure Detection

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...

74cmsSE v3.4.1 - Arbitrary File Read Detection

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php. !/usr/bin/env python3 -- coding: utf-8 -- """74cmsSE v3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

D-Link DIR-816L - Improper Access Control Detection

D-Link DIR-816LFW206b01 is susceptible to improper access control. An attacker can access folders folderview.php and categoryview.php and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link...

Zoho ManageEngine - Access Control Bypass Detection

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

Parallels H-Sphere 3.6.1713 - Cross-Site Scripting Detection

Parallels H-Sphere 3.6.1713 contains a cross-site scripting vulnerability via the indexen.php 'from' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Parallels H-Sphere 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

BackupBuddy - Local File Inclusion Detection

BackupBuddy versions 8.5.8.0 - 8.7.4.1 are vulnerable to a local file inclusion vulnerability via the 'download' and 'local-destination-id' parameters. !/usr/bin/env python3 -- coding: utf-8 -- """BackupBuddy versions 8.""" import re from kittysploit import from lib.protocols.http.httpclient impo...

VMware vRealize Log Insight - Improper Access Control to RCE Detection

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """The vRealize Log Insight...

Nortek Linear eMerge E3-Series - Cross-Site Scripting Detection

There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user. !/usr/bin/env python3 -- coding: utf-8 -- """There is a local session fixation vulnerability that, when chained with cross-site scripting,...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

Open edX <2022-06-06 - Cross-Site Scripting Detection

Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in the logout URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in.""" from...

Lin CMS Spring Boot - Default JWT Token Detection

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. !/usr/bin/env python3 -- coding: utf-8 -- """An access control issue in Lin CMS Spring Boot v0.""" from kittysploit import from...

WWBN AVideo 11.6 - Cross-Site Scripting Detection

WWBN AVideo 11.6 contains a cross-site scripting vulnerability in the footer alerts functionality via the 'success' parameter, which is inserted into the document with insufficient sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """WWBN AVideo 11.""" from kittysploit import from...

Powertek Firmware <3.30.30 - Authorization Bypass Detection

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read Detection

WordPress MultiSafepay for WooCommerce plugin through 4.13.1 contains an arbitrary file read vulnerability. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...

WAVLINK WN530HG4 - Improper Access Control Detection

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd and thereby possibly obtain sensitive information, modify data, and/or execute...

Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting Detection

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting XSS vulnerability via accesstoken.php. !/usr/bin/env python3 -- coding: utf-8 -- """Portal do Software Publico Brasileiro i3geo v7.""" from kittysploit import from lib.protocols.http.httpclient...

WAVLINK WN535 G3 - Improper Access Control Detection

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized...

Hospital Management System 1.0 - SQL Injection Detection

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/admin.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/e...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting Detection

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. !/usr/bin/env python3 -- coding: utf-8 -- """H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.""" from...

Academy Learning Management System <5.9.1 - Cross-Site Scripting Detection

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Froxlor < 0.10.38.2. - HTML Injection Detection

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. !/usr/bin/env python3 -- coding: utf-8 -- """HTML Injection in GitHub repository froxlor/froxlor prior to 0.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control Detection

Dapr Dashboard 0.1.0 through 0.10.0 is susceptible to improper access control. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Dapr Dashboard 0.""" from kittysploit import from...

Jira Netic Group Export <1.0.3 - Missing Authorization Detection

Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a...

WordPress Feed Them Social <3.0.1 - Cross-Site Scripting Detection

WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Feed Them Social plugin before 3.""" from kittysploit...

Piano LED Visualizer 1.3 - Local File Inclusion Detection

Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Piano LED Visualizer 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Piano LED...

ZEROF Web Server 2.0 - Cross-Site Scripting Detection

ZEROF Web Server 2.0 allows /admin.back cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """ZEROF Web Server 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZEROF Web Server 2.0 - Cross-Site Scripti...

WordPress Ninja Job Board < 1.3.3 - Direct Request Detection

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. !/usr/bin/env...