SiYuan Note - Cross-Site Scripting Detection

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

Open WebUI < 0.9.5 - Information Disclosure Detection

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-...

CX Cloud Panel - Detect

CX Cloud panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """CX Cloud panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CX Cloud Panel - Detect', 'description': 'CX Cloud panel was...

Cyberoam SSL VPN Panel - Detect

Cyberoam SSL VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberoam SSL VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberoam SSL VPN Panel - Detect', 'description':...

Cyberpanel Login Panel - Detect

Cyberpanel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberpanel login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberpanel Login Panel - Detect',...

Danswer Panel - Detect

Danswer panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Danswer panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Danswer Panel - Detect', 'description': 'Danswer panel was...

Dash Panel Detect

Detects Dash Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dash Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dash Panel Detect', 'description': 'Detects Dash Panel Detect.',...

Davantis Video Analytics Panel - Detect

Davantis Video Analytics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Davantis Video Analytics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Davantis Video Analytics Panel -...

DbGate Anonymous Access - Detection

Detected DbGate instances that allowed anonymous access due to insecure default authentication settings, where unauthenticated users could obtain a valid JWT token and access database management APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected DbGate instances that allowed anonymous...

Fedora Default Test Page Detection

Detects Fedora Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Fedora Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fedora Default Test Page Detection', 'description':...

Microsoft Azure Default Page Detection

Detects Microsoft Azure Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Azure Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Azure Default Page Detection',...

Azure Container Instance Default Page Detection

Detects Azure Container Instance Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Container Instance Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Container Instance...

RunCloud Default Page Detection

Detects RunCloud Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects RunCloud Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RunCloud Default Page Detection', 'description': 'Detects...

Dell BMC Panel - Detect

Dell BMC web panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell BMC web panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell BMC Panel - Detect', 'description': 'Dell BMC web...

Dell Remote Web Access Panel - Detect

Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops hosted on Dell servers. !/usr/bin/env python3 -- coding: utf-8 -- """Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops .""" fro...

Delphi MVC Exception - Page Detection

Detects Delphi MVC Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Delphi MVC Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delphi MVC Exception - Page Detection',...

DEOS OPEN 500EMS Controller - Admin Exposure Detection

The DEOS OPEN 500EMS controller exposes administrative functions without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The DEOS OPEN 500EMS controller exposes administrative functions without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Detect Sentry Instance

Detects Detect Sentry Instance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Sentry Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Sentry Instance', 'description': 'Detects Detect...

Digital Rebar - Local File Inclusion Detection

Digital Rebar versions 4.3.0, 4.3.2, 4.3.3, 4.4.0, and maybe others are vulnerable to local file inclusion because web requests can navigate outside of DRP controlled areas. !/usr/bin/env python3 -- coding: utf-8 -- """Digital Rebar versions 4.""" import re from kittysploit import from...

DirectAdmin Login Panel - Detect

DirectAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DirectAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DirectAdmin Login Panel - Detect', 'description...

dizqueTV - Detect

An instance running dizqueTV was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running dizqueTV was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'dizqueTV - Detect', 'description': 'A...

Dlink Dir-850L Info Leak Detection

Detects Dlink Dir-850L Info Leak. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dlink Dir-850L Info Leak.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dlink Dir-850L Info Leak Detection', 'description':...

D-Link DNS Series CGI Script - Unauthenticated Detection

A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET...

AWS Elastic Beanstalk Dockerrun.aws.json - Exposure Detection

Detected AWS Elastic Beanstalk Dockerrun.aws.json configuration file was publicly accessible, potentially revealing Docker container definitions, image names, hostnames, port mappings, and infrastructure details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected AWS Elastic Beanstalk...

Docmosis Tornado Server Exposure Detection

Docmosis Tornado Server is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Docmosis Tornado Server is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docmosis Tornado Server Exposure Detection',...

Dokuwiki Login Panel - Detect

Dokuwiki login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dokuwiki login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dokuwiki Login Panel - Detect', 'description':...

Dolibarr Installer Detection

Dolibarr is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Dolibarr is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Drone CI Login Panel - Detect

Drone CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Drone CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone CI Login Panel - Detect', 'description': 'Drone...

DXPlanning Panel - Detect

DXPlanning was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DXPlanning was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DXPlanning Panel - Detect', 'description': 'DXPlanning was detected.',...

EasyCVR video management - Users Information Exposure Detection

EasyCVR video management platform has leaked user information !/usr/bin/env python3 -- coding: utf-8 -- """EasyCVR video management platform has leaked user information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Easy Installer by ViserLab - Exposure Detection

Checks for the presence of a Easy Installer by ViserLab. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Easy Installer by ViserLab.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Easy...

IBM Eclipse Help System - Cross-Site Scripting Detection

IBM Eclipse Help System 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0 through 7.0.0.2, and 8.0 prior to 8.0.0.1 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env...

Ecology Detection

Detects Ecology Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ecology Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ecology Detection', 'description': 'Detects Ecology Detection.',...

Weaver e-cology verifyquicklogin.jsp - Auth Bypass Detection

There is an arbitrary administrator login vulnerability in the Panwei OA E-Cology VerifyQuickLogin.jsp file. An attacker can obtain the administrator Session by sending a special request package. !/usr/bin/env python3 -- coding: utf-8 -- """There is an arbitrary administrator login vulnerability ...

Elasticsearch - SQL Client Detection

Elasticsearch detected SQL client. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch detected SQL client.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elasticsearch - SQL Client Detection', 'description':...

Elfiq Link Balancer - Login Panel Detection

Elfiq Link Balancer management login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Elfiq Link Balancer management login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Elfiq Link Balanc...

ELMAH Exposure Detection

ELMAH Error Logging Modules and Handlers is an application-wide error logging facility that is completely pluggable. It can be dynamically added to a running ASP.NET web application, or even all ASP.NET web applications on a machine, without any need for re-compilation or re-deployment. In some...

Emlog Pro - Installation Detection

Emlog Pro Installation page has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Emlog Pro Installation page has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Emlog Pro - Installation...

EmpireCMS Detect

Detects EmpireCMS Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EmpireCMS Detect.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EmpireCMS Detect', 'description': 'Detects EmpireCMS Detect.'...

EMQX Login Panel - Detect

EMQX login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EMQX login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EMQX Login Panel - Detect', 'description': 'EMQX login panel...

EMS Web Client Login Panel - Detect

EMS Web Client login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EMS Web Client login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EMS Web Client Login Panel - Detect',...

Encompass CM1 Home Page - Detect

Encompass CM1 home page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Encompass CM1 home page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Encompass CM1 Home Page - Detect', 'description...

Endian Firewall - Login Panel Detection

Endian Firewall Community is an open-source UTM Unified Threat Management appliance and VPN gateway. The web management interface is commonly exposed on port 10443 with a self-signed certificate. !/usr/bin/env python3 -- coding: utf-8 -- """Endian Firewall Community is an open-source UTM Unified...

Entrust IdentityGuard Self-Service Login Panel - Detect

Entrust IdentityGuard Self-Service login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Entrust IdentityGuard Self-Service login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Environment Ruby File Disclosure Detection

Ruby environment file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby environment file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Environment Ruby File Disclosure Detection',...

Epson WF Series Detection

Searches for Epson WF series printers on the domain !/usr/bin/env python3 -- coding: utf-8 -- """Searches for Epson WF series printers on the domain.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Epson WF Series...

Eset Protect Login Panel - Detect

Login page for Eset Protect !/usr/bin/env python3 -- coding: utf-8 -- """Login page for Eset Protect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Eset Protect Login Panel - Detect', 'description': 'Login page for...

ETIC Telecom Device Login - Panel Detection

ETIC Telecom device login panel was discovered !/usr/bin/env python3 -- coding: utf-8 -- """ETIC Telecom device login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ETIC Telecom Device Login -...

EVSE Web Interface Panel - Detection

Detects EVSE Web Interface Panel - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects EVSE Web Interface Panel - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EVSE Web Interface Panel -...

Etcd Version - Detect

Template detects Etcd version. !/usr/bin/env python3 -- coding: utf-8 -- """Template detects Etcd version.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etcd Version - Detect', 'description': 'Template detects Etcd...