JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS Detection

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...

WhoDB < 0.45.0 - Path Traversal Detection

WhoDB contains a path traversal caused by lack of validation when opening database files, letting unauthenticated attackers access arbitrary Sqlite3 databases on the host system, exploit requires attacker to manipulate database filename input. !/usr/bin/env python3 -- coding: utf-8 -- """WhoDB...

Label Studio < 1.16.0 - Cross-Site Scripting Detection

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal Detection

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. !/usr/bin/env python3 -- coding: utf-8 -- """TRUfusion Enterprise versions...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass

Kentico Staging SyncServer accepts UsernameToken without password WT-2025-0011. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico Xperience 13 CMS - Staging Service Authentication Bypass""" import secrets from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

NocoDB < 0.258.0 - Reflected XSS in Password Reset Detection

NocoDB versions before 0.258.0 contain a reflected cross-site scripting caused by insecure use of '\u003C%-' in resetPassword.ts, letting attackers execute malicious scripts in victims' browsers, exploit requires sending crafted requests to /api/v1/db/auth/password/reset/:tokenId. !/usr/bin/env...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion Detection

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Karel IP Phone IP1211 Web...

Liferay Portal & DXP - Cross-Site Scripting Detection

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """Liferay Portal 7."""...

Letta 0.7.12 - Remote Code Execution

Unauthenticated RCE via POST /v1/tools/run executing attacker tool sourcecode. !/usr/bin/env python3 -- coding: utf-8 -- """Letta 0.7.12 - Remote Code Execution""" import hashlib import json from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

XWiki Platform - Information Disclosure Detection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is a generic wiki platform...

Service Finder Bookings - Authentication Bypass Detection

Service Finder Bookings WordPress plugin = 6.0 contains a privilege escalation caused by improper validation of user cookie in servicefinderswitchback function, letting unauthenticated attackers login as any user including admins. !/usr/bin/env python3 -- coding: utf-8 -- """Service Finder Bookin...

Zimbra Collaboration - Local File Inclusion Detection

Zimbra Collaboration ZCS 10.0 and 10.1 contain a local file inclusion caused by improper handling of user-supplied parameters in the RestFilter servlet, letting unauthenticated remote attackers include arbitrary files from WebRoot, exploit requires crafted requests to /h/rest endpoint...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure Detection

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation Detection

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. !/usr/bin/env python3 -- coding: utf-8 -- """Zoom WordPress plugin 4.""" from...

Blinko <= 1.8.3 - Path Traversal via /plugins Detection

Blinko = 1.8.3 contains a path traversal caused by improper path concatenation without verification in the plugin file server endpoint, letting remote attackers access arbitrary files, exploit requires network access. !/usr/bin/env python3 -- coding: utf-8 -- """Blinko = 1.""" import re from...

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS Detection

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Adminer = 5.""" from kittysploit impo...

FOSSBilling - Server-Side Template Injection

FOSSBilling stringrender API evaluates unsandboxed Twig, allowing SQL/info disclosure via guest.getDi.db.getCell. !/usr/bin/env python3 -- coding: utf-8 -- """FOSSBilling - Server-Side Template Injection""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

SiYuan Note - Cross-Site Scripting Detection

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

Open WebUI < 0.9.5 - Information Disclosure Detection

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-...

CX Cloud Panel - Detect

CX Cloud panel was detected, !/usr/bin/env python3 -- coding: utf-8 -- """CX Cloud panel was detected,.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'CX Cloud Panel - Detect', 'description': 'CX Cloud panel was...

Cyberoam SSL VPN Panel - Detect

Cyberoam SSL VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberoam SSL VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberoam SSL VPN Panel - Detect', 'description':...

Cyberpanel Login Panel - Detect

Cyberpanel login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberpanel login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberpanel Login Panel - Detect',...

Danswer Panel - Detect

Danswer panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Danswer panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Danswer Panel - Detect', 'description': 'Danswer panel was...

Dash Panel Detect

Detects Dash Panel Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dash Panel Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dash Panel Detect', 'description': 'Detects Dash Panel Detect.',...

Davantis Video Analytics Panel - Detect

Davantis Video Analytics panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Davantis Video Analytics panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Davantis Video Analytics Panel -...

DbGate Anonymous Access - Detection

Detected DbGate instances that allowed anonymous access due to insecure default authentication settings, where unauthenticated users could obtain a valid JWT token and access database management APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detected DbGate instances that allowed anonymous...

Fedora Default Test Page Detection

Detects Fedora Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Fedora Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fedora Default Test Page Detection', 'description':...

Microsoft Azure Default Page Detection

Detects Microsoft Azure Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Microsoft Azure Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Microsoft Azure Default Page Detection',...

Azure Container Instance Default Page Detection

Detects Azure Container Instance Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Container Instance Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Container Instance...

RunCloud Default Page Detection

Detects RunCloud Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects RunCloud Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RunCloud Default Page Detection', 'description': 'Detects...

Dell BMC Panel - Detect

Dell BMC web panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dell BMC web panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dell BMC Panel - Detect', 'description': 'Dell BMC web...

Dell Remote Web Access Panel - Detect

Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops hosted on Dell servers. !/usr/bin/env python3 -- coding: utf-8 -- """Dell Remote Web Access is a secure web portal that enables remote access to files, applications, and desktops .""" fro...

Delphi MVC Exception - Page Detection

Detects Delphi MVC Exception - Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Delphi MVC Exception - Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Delphi MVC Exception - Page Detection',...

DEOS OPEN 500EMS Controller - Admin Exposure Detection

The DEOS OPEN 500EMS controller exposes administrative functions without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """The DEOS OPEN 500EMS controller exposes administrative functions without authentication.""" from kittysploit import from lib.protocols.http.httpclient import...

Detect Sentry Instance

Detects Detect Sentry Instance. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Sentry Instance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Sentry Instance', 'description': 'Detects Detect...

Digital Rebar - Local File Inclusion Detection

Digital Rebar versions 4.3.0, 4.3.2, 4.3.3, 4.4.0, and maybe others are vulnerable to local file inclusion because web requests can navigate outside of DRP controlled areas. !/usr/bin/env python3 -- coding: utf-8 -- """Digital Rebar versions 4.""" import re from kittysploit import from...

DirectAdmin Login Panel - Detect

DirectAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DirectAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DirectAdmin Login Panel - Detect', 'description...

dizqueTV - Detect

An instance running dizqueTV was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running dizqueTV was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'dizqueTV - Detect', 'description': 'A...

Dlink Dir-850L Info Leak Detection

Detects Dlink Dir-850L Info Leak. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dlink Dir-850L Info Leak.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dlink Dir-850L Info Leak Detection', 'description':...

D-Link DNS Series CGI Script - Unauthenticated Detection

A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET...

AWS Elastic Beanstalk Dockerrun.aws.json - Exposure Detection

Detected AWS Elastic Beanstalk Dockerrun.aws.json configuration file was publicly accessible, potentially revealing Docker container definitions, image names, hostnames, port mappings, and infrastructure details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected AWS Elastic Beanstalk...

Docmosis Tornado Server Exposure Detection

Docmosis Tornado Server is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Docmosis Tornado Server is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Docmosis Tornado Server Exposure Detection',...

Dokuwiki Login Panel - Detect

Dokuwiki login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Dokuwiki login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Dokuwiki Login Panel - Detect', 'description':...

Dolibarr Installer Detection

Dolibarr is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Dolibarr is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Drone CI Login Panel - Detect

Drone CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Drone CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone CI Login Panel - Detect', 'description': 'Drone...

DXPlanning Panel - Detect

DXPlanning was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DXPlanning was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DXPlanning Panel - Detect', 'description': 'DXPlanning was detected.',...

EasyCVR video management - Users Information Exposure Detection

EasyCVR video management platform has leaked user information !/usr/bin/env python3 -- coding: utf-8 -- """EasyCVR video management platform has leaked user information.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Easy Installer by ViserLab - Exposure Detection

Checks for the presence of a Easy Installer by ViserLab. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Easy Installer by ViserLab.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Easy...

IBM Eclipse Help System - Cross-Site Scripting Detection

IBM Eclipse Help System 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0 through 7.0.0.2, and 8.0 prior to 8.0.0.1 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env...

Ecology Detection

Detects Ecology Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ecology Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ecology Detection', 'description': 'Detects Ecology Detection.',...