Unauth Supervisor Dashboard - Detect

Supervisor Dashboard was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Supervisor Dashboard was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Unibox Panel - Detect

Unibox Administrator panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Unibox Administrator panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unibox Panel - Detect', 'description':...

Unitronics PLC - Login Panel Detection

Unitronics PLC web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Unitronics PLC web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unitronics PLC ...

APC UPC Multimon Status Page - Detect

Multimon UPS status page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multimon UPS status page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'APC UPC Multimon Status Page - Detect',...

Vagrantfile Exposure Detection

Vagrantfile is exposed to external users. !/usr/bin/env python3 -- coding: utf-8 -- """Vagrantfile is exposed to external users.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vagrantfile Exposure Detection',...

Vaultwarden Login Panel - Detect

Vaultwarden products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vaultwarden products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vaultwarden Login Panel - Detect', 'description':...

Veeam Backup Enterprise Manager Login - Detect

Veeam Backup Enterprise Manager Login !/usr/bin/env python3 -- coding: utf-8 -- """Veeam Backup Enterprise Manager Login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam Backup Enterprise Manager Login - Detect...

Vidyo Admin Login Panel - Detect

Vidyo admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vidyo admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vidyo Admin Login Panel - Detect', 'description...

Vikunja Login Panel - Detect

Vikunja login panel was detected. Vikunja is a self-hosted to-do and project management application. !/usr/bin/env python3 -- coding: utf-8 -- """Vikunja login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

Vite Configuration - File Exposure Detection

The vite.config.js file is used to customize the behavior of Vite and specify various settings for your project. !/usr/bin/env python3 -- coding: utf-8 -- """The vite.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

VMware Aria Operations Login - Detect

Detects VMware Aria Operations Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detects VMware Aria Operations Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Aria Operations Login - Detect',...

VMWare Cloud - Cross Site Scripting Detection

VMWare Cloud is vulnerable to Reflected Cross Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """VMWare Cloud is vulnerable to Reflected Cross Site Scripting vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

VMware Horizon Login Panel - Detect

VMware Horizon login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware Horizon login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware Horizon Login Panel -...

Voyager 1.3.0 - Directory Traversal Detection

Voyager 1.3.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Voyager 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Voyager 1.3.0 - Directory Traversal Detection',...

VTScada - Internet Client Panel Detection

VTScada by Trihedral Engineering is a SCADA platform used in water/ wastewater, oil and gas, and utilities. The Internet Client feature exposes a browser-based view of process data, and is commonly deployed by municipal water systems across North America. !/usr/bin/env python3 -- coding: utf-8 --...

Vue PACS - Panel Detection

Vue PACS was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Vue PACS was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Vue PACS - Panel Detection', 'description': 'Vue PACS was detected.', 'author...

Watershed Login Panel - Detect

Watershed login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Watershed login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Watershed Login Panel - Detect', 'description':...

OA E-Office officeserver.php Arbitrary File Read Detection

There is an arbitrary file reading vulnerability in the OA E-Office officeserver.php file. An attacker can download any file on the server through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary file reading vulnerability in the OA E-Office officeserver."""...

Weaviate - Exposure Detection

Detected an exposed Weaviate instance by accessing its API endpoints. Verified exposure by identifying meta information, schema details, and specific endpoint references in the response, confirming that the instance was publicly accessible. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an...

Webasyst Installer Exposure Detection

Webasyst is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Webasyst is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Webroot Login Panel - Detect

Webroot login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Webroot login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Webroot Login Panel - Detect', 'description': 'Webroot...

IBM WebSphere Application Server Detection

Detects servers running IBM WebSphere Application Server via the Server header. !/usr/bin/env python3 -- coding: utf-8 -- """Detects servers running IBM WebSphere Application Server via the Server header.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Weekender Newspaper 9.0 - Open Redirect Detection

WordPress Weekender Newspaper theme 9.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Weekender...

Weglot API Key - Exposed Detection

Detected Weglot API key was found exposed in a publicly accessible JavaScript file. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Weglot API key was found exposed in a publicly accessible JavaScript file.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Wiki.js - Detect

Wiki.js was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wiki.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wiki.js - Detect', 'description': 'Wiki.js was detected.', 'author': 'KittySploit Team',...

WMW Enterprise Login Panel - Detect

WMW Enterprise login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WMW Enterprise login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WMW Enterprise Login Panel - Detect',...

WonderCMS Detect

Detects WonderCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WonderCMS Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WonderCMS Detect', 'description': 'Detects WonderCMS Detect.', 'author'...

Woodpecker CI Panel - Detect

Woodpecker CI panel was detected. Woodpecker is a community fork of Drone CI, providing a simple yet powerful continuous integration platform. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker CI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import...

Woodwing Studio Server Panel - Detect

Detects Woodwing Studio Server Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Woodwing Studio Server Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Woodwing Studio Server Panel ...

WordPress gtranslate Plugin Directory Listing Detection

Searches for sensitive directories present in the gtranslate wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the gtranslate wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Wordpress RDF User Enumeration Detection

Leaked Wordpress RDF leads to User Emumeration. !/usr/bin/env python3 -- coding: utf-8 -- """Leaked Wordpress RDF leads to User Emumeration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress RDF User...

WordPress Storefront Theme - Full Path Disclosure Detection

The Storefront theme for WordPress was detected to be vulnerable to Full Path Disclosure, allowing unauthenticated attackers to obtain the full application path that could aid other attacks when combined with another vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Storefront theme...

WordPress Configuration wp-env - Exposure Detection

Detected the WordPress wp-env.json configuration file publicly accessible, potentially revealing the PHP version, installed plugins, themes, and development environment details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the WordPress wp-env.""" from kittysploit import from...

WoW CMS Installer Exposure Detection

WoW CMS is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """WoW CMS is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Wpdm-Cache Session Detection

Leaked session of Wpdm Cache wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Leaked session of Wpdm Cache wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wpdm-Cache Session Detection'...

All In One WP Security & Firewall - Full Path Disclosure Detection

All In One WP Security & Firewall WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """All In O...

WordPress Elementor Pro - Full Path Disclosure Detection

WordPress Plugin Elementor Pro plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Pro plugin files are publicly...

WordPress Gravity Forms - Log File Disclosure Detection

The Gravity Forms plugin for WordPress stores log files that may be accessible without authentication. When logging is enabled, debug and error logs are created in the wp-content/uploads/gravityforms/logs/ directory. These logs can contain sensitive information including form submission data, fil...

WordPress Grimag <1.1.1 - Open Redirection Detection

WordPress Grimag theme before 1.1.1 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Grimag theme befo...

WordPress wp-links-opml.php - Version Disclosure Detection

WordPress wp-links-opml.php file was publicly accessible and expossed the WordPress version in the generator tag. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress wp-links-opml.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Memphis Document Library 3.1.5 - Local File Inclusion Detection

WordPress Memphis Document Library 3.1.5 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Memphis Document Library 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Gallery Plugin / NextGEN Gallery (nextgen-gallery) Error Log Disclosure Detection

The WordPress NextGEN Gallery plugin exposes a PHP error log file phperrors.log within its admin directory that is directly accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress NextGEN Gallery plugin exposes a PHP error log file phperrors.""" from...

WordPress Plugin lifterlms Listing Detection

Searches for sensitive directories present in the lifterlms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the lifterlms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

WordPress Pretty Links - Full Path Disclosure Detection

WordPress Pretty Links plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Pretty Links plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site Scripting Detection

The Real Estate 7 premium theme for WordPress is vulnerable to Reflected Cross-Site Scripting XSS attack vector in versions up to, and including, v3.3.4 via the 'ctadditionalfeatures' option due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated...

Laravel Livewire - Detect

Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces.""" from kittysploit import from...

Lotus Domino Version Extractor Detection

Detects Lotus Domino Version Extractor. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lotus Domino Version Extractor.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lotus Domino Version Extractor...

Accent Microcomputers LFI Detection

A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrieve password files. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrie.""" import r...

ACEmanager Detection

ACEManager was detected. ACEManager is a configuration and diagnostic tool for the Sierra Wireless AirLink Raven modems. !/usr/bin/env python3 -- coding: utf-8 -- """ACEManager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AChecker Login - Panel Detect

AChecker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AChecker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AChecker Login - Panel Detect', 'description':...