WordPress Configuration wp-env - Exposure Detection

Detected the WordPress wp-env.json configuration file publicly accessible, potentially revealing the PHP version, installed plugins, themes, and development environment details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the WordPress wp-env.""" from kittysploit import from...

Wordpress XML-RPC List System Methods Detection

Detects Wordpress XML-RPC List System Methods. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Wordpress XML-RPC List System Methods.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wordpress XML-RPC List System...

WoW CMS Installer Exposure Detection

WoW CMS is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """WoW CMS is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Wpdm-Cache Session Detection

Leaked session of Wpdm Cache wordpress plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Leaked session of Wpdm Cache wordpress plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wpdm-Cache Session Detection'...

WordPress Adaptive Images < 0.6.69 - Cross-Site Scripting Detection

WordPress Adaptive Images 0.6.69 is susceptible to cross-site scripting because the plugin does not sanitize and escape the REQUESTURI before outputting it back in a page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Adaptive Images 0.""" from kittysploit import from...

All In One WP Security & Firewall - Full Path Disclosure Detection

All In One WP Security & Firewall WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """All In O...

WordPress Elementor Pro - Full Path Disclosure Detection

WordPress Plugin Elementor Pro plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Plugin Elementor Pro plugin files are publicly...

Wordpress - Path Disclosure Detection

Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """Wordpress internal file system path of a WordPress installation is exposed or disclosed to unauthorized users.""" from kittysploit import fro...

WordPress Gravity Forms - Log File Disclosure Detection

The Gravity Forms plugin for WordPress stores log files that may be accessible without authentication. When logging is enabled, debug and error logs are created in the wp-content/uploads/gravityforms/logs/ directory. These logs can contain sensitive information including form submission data, fil...

WordPress Grimag <1.1.1 - Open Redirection Detection

WordPress Grimag theme before 1.1.1 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Grimag theme befo...

WordPress wp-links-opml.php - Version Disclosure Detection

WordPress wp-links-opml.php file was publicly accessible and expossed the WordPress version in the generator tag. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress wp-links-opml.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Memphis Document Library 3.1.5 - Local File Inclusion Detection

WordPress Memphis Document Library 3.1.5 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Memphis Document Library 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Gallery Plugin / NextGEN Gallery (nextgen-gallery) Error Log Disclosure Detection

The WordPress NextGEN Gallery plugin exposes a PHP error log file phperrors.log within its admin directory that is directly accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress NextGEN Gallery plugin exposes a PHP error log file phperrors.""" from...

WordPress Plugin lifterlms Listing Detection

Searches for sensitive directories present in the lifterlms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the lifterlms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

WordPress Pretty Links - Full Path Disclosure Detection

WordPress Pretty Links plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Pretty Links plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site Scripting Detection

The Real Estate 7 premium theme for WordPress is vulnerable to Reflected Cross-Site Scripting XSS attack vector in versions up to, and including, v3.3.4 via the 'ctadditionalfeatures' option due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated...

Laravel Livewire - Detect

Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of Laravel Livewire, a full-stack framework for Laravel that builds dynamic interfaces.""" from kittysploit import from...

Lotus Domino Version Extractor Detection

Detects Lotus Domino Version Extractor. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Lotus Domino Version Extractor.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Lotus Domino Version Extractor...

Accent Microcomputers LFI Detection

A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrieve password files. !/usr/bin/env python3 -- coding: utf-8 -- """A local file inclusion vulnerability in Accent Microcomputers offerings could allow remote attackers to retrie.""" import r...

ACEmanager Detection

ACEManager was detected. ACEManager is a configuration and diagnostic tool for the Sierra Wireless AirLink Raven modems. !/usr/bin/env python3 -- coding: utf-8 -- """ACEManager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

AChecker Login - Panel Detect

AChecker login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AChecker login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AChecker Login - Panel Detect', 'description':...

Apache ActiveMQ Exposure Detection

An Apache ActiveMQ implementation was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache ActiveMQ implementation was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache ActiveMQ Exposur...

AdGuard - Installation Detection

AdGuard Installation panel has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """AdGuard Installation panel has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AdGuard - Installation Detection'...

Administrate Dashboard Exposure Detection

Administrate Dashboard was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Administrate Dashboard was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Administrate Dashboard Exposure Detection',...

Adobe Connect Username Exposure Detection

Adobe Connect Username is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Connect Username is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Adobe Connect Username Exposure Detection',...

ActionTec Modem Advanced Setup Login Panel Detection

An ActionTec Modem Advanced Setup login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An ActionTec Modem Advanced Setup login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

AEM QueryBuilder Json Servlet Detection

Sensitive information might be exposed via AEMs QueryBuilderServlet or QueryBuilderFeedServlet. !/usr/bin/env python3 -- coding: utf-8 -- """Sensitive information might be exposed via AEMs QueryBuilderServlet or QueryBuilderFeedServlet.""" from kittysploit import from lib.protocols.http.httpclien...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences.""" from kittysploit import from lib.protocols.http.httpclient import...

Adobe Experience Manager Sling User Login - Detect

Adobe Experience Manager Sling user login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager Sling user login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via requests using the selector childlist when the dispatcher does not respect the content-type responded by AEM and flips from application/json to text/html. As a consequence, the reflected suffix is executed and interpreted ...

Aethra Telecommunications Login - Panel Detection

Aethra Telecommunication login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Aethra Telecommunication login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Aethra...

AgentGPT Panel - Detect

AgentGPT was detected. AgentGPT was a browser-based autonomous AI agent platform that allows users to create, configure and deploy AI agents directly in the browser. !/usr/bin/env python3 -- coding: utf-8 -- """AgentGPT was detected.""" from kittysploit import from lib.protocols.http.httpclient...

Airflow Debug Trace Detection

Airflow Debug Trace enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Airflow Debug Trace enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Airflow Debug Trace Detection', 'description': 'Airflow Debug Tra...

Alfresco Content App Panel - Detect

Alfresco Content App panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Alfresco Content App panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Alfresco Content App Panel - Detect',...

AlienVault USM Login Panel Detection

An AlienVault USM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AlienVault USM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AlienVault USM Login Panel...

Amazon ECS Sample App Default Page - Detect

Amazon ECS Sample App Default Page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Amazon ECS Sample App Default Page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Amazon ECS Sample App...

Ambassador API Gateway Diagnostics - Exposure Detection

Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints, routing configurations, and internal cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Ambassador API Gateway diagnostics portal, revealing service mappings, API endpoints,...

NetBiblio WebOPAC - Cross-Site Scripting Detection

NetBiblio WebOPAC before 4.0.0.320 is affected by a reflected cross-site scripting vulnerability in its Wikipedia module through /NetBiblio/search/shortview via the searchTerm parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NetBiblio WebOPAC before 4.""" from kittysploit import from...

myfactory FMS - Cross-Site Scripting Detection

myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter. !/usr/bin/env python3 -- coding: utf-8 -- """myfactory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'myfactory FMS - Cross-Site...

Apereo CAS Cross-Site Scripting Detection

Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Apereo CAS through 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting Detection

SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Knowledge Warehouse 7.""" from kittysploit import from lib.protocols.http.httpclie...

Reprise License Manager 14.2 - Authentication Bypass Detection

Reprise License Manager RLM 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user. !/usr/bin/env python3 -- coding: utf-8 -- """Reprise License Manager RLM 14.""" from kittysploit import from lib.protocols.http.httpclient...

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting Detection

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The Redirection for Contact Form 7 WordPress plugin before 2.""" from...

WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting Detection

WordPress Embed Swagger plugin 1.0.0 and prior contains a reflected cross-site scripting vulnerability due to insufficient escaping/sanitization and validation via the url parameter found in the /swagger-iframe.php file, which allows attackers to inject arbitrary web scripts onto the page...

Mastodon Prototype Pollution Vulnerability Detection

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The GitHub repository mastodon/mastodon prior to 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner...

WordPress Shareaholic <9.7.6 - Information Disclosure Detection

WordPress Shareaholic plugin prior to 9.7.6 is susceptible to information disclosure. The plugin does not have proper authorization check in one of the AJAX actions, available to both unauthenticated before 9.7.5 and authenticated in 9.7.5 users, allowing them to possibly obtain sensitive...

Wordpress Profile Builder Plugin Cross-Site Scripting Detection

The Profile Builder User Profile & User Registration Forms WordPress plugin is vulnerable to cross-site scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

nitely/spirit 0.12.3 - Open Redirect Detection

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Member Hero <=1.0.9 - Remote Code Execution Detection

WordPress Member Hero plugin through 1.0.9 is susceptible to remote code execution. The plugin lacks authorization checks and does not validate the a request parameter in an AJAX action, allowing an attacker to call arbitrary PHP functions with no arguments. An attacker can thus execute malware,...

WordPress WooCommerce <3.1.2 - Arbitrary Function Call Detection

WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary...