Misconfiguration
Welcome to the Misconfiguration template category.
Explore templates in the ‘misconfiguration’ category.
Subcategories
Section titled “Subcategories”- Adobe
- Aem
- Airflow
- Akamai
- Apache
- Aws
- Confluence
- Debug
- Drupal
- Gitlab
- Gocd
- Graphql
- H2O
- Hp
- Installer
- Jenkins
- Jolokia
- Kubernetes
- Liferay
- Microsoft
- Nacos
- Netdisco
- Nginx
- Openbmcs
- Php
- Phpmyadmin
- Prometheus
- Proxy
- Sap
- Springboot
- Symfony
- Teamcity
Templates
Section titled “Templates”- Ace Admin Dashboard
- Alibaba Mongoshake Unauth
- Ampache Update Exposure
- Ampps Dirlisting
- Android Debug Database Exposed
- Anteon Dashboard Unauth
- Apache Drill Exposure
- Apache Druid Unauth
- Apache Impala
- Apache Struts Showcase
- Apc Info
- Apollo Adminservice Unauth
- Apple Cups Exposure
- Application Yaml
- Ariang Debug Console
- Artifactory Anonymous Deploy
- Aspx Debug Mode
- Atlantis Dashboard
- Atlassian Bamboo Build
- Bitbucket Auth Bypass
- Bitbucket Public Repository
- Blackbox Exporter Metrics
- Bootstrap Admin Panel Template
- Bravia Signage
- Browserless Debugger
- Cadvisor Exposure
- Canon C3325 Unauth
- Casdoor Unauth Operations
- Casdoor Users Password
- Cgi Test Page
- Changedetection Unauth
- Chatgpt Web Unauth
- Clickhouse Unauth Api
- Clockwork Dashboard Exposure
- Cloud Metadata
- Cloudflare Image Ssrf
- Cluster Panel
- Cobbler Exposed Directory
- Codeigniter Errorpage
- Codemeter Webadmin
- Codis Dashboard
- Collectd Exporter Metrics
- Command Api Explorer
- Confluence Dashboard
- Cookies Without Httponly
- Cookies Without Secure
- Coolify Register Account
- Corebos Htaccess
- Cx Cloud Upload Detect
- D Link Arbitary Fileread
- Database Error
- Default Spx Key
- Deos Openview Admin
- Deployment Interface Exposed
- Dgraph Dashboard Exposure
- Directory Listing No Host Header
- Django Debug Detect
- Dlink Config Dump
- Dlink N300 Backup
- Dlink Unauth Cgi Script
- Docker Daemon Exposed
- Docker Registry
- Docmosis Tornado Server
- Dont Panic Traceback
- Doris Dashboard
- Dragonfly Public Signup
- Druid Monitor
- Dynamic Container Host
- Ec2 Instance Information
- Ecology Info Leak
- Elastic Hd Dashboard
- Elasticsearch
- Encompass Cm1 Homepage
- Envoy Admin Exposure
- Espeasy Mega Exposure
- Esphome Dashboard
- Etcd Unauthenticated Api
- Everything Listing
- Exposed Docker Api
- Exposed Jquery File Upload
- Exposed Kafdrop
- Exposed Kibana
- Exposed Service Now
- Exposed Sqlite Manager
- Express Stack Trace
- Feiyuxing Info Leak
- Filebrowser Unauth
- Flask Redis Docker
- Forgejo Repo Exposure
- Formalms Install
- Freshrss Unauth
- Front Page Misconfig
- Fusionauth Admin Setup
- Ganglia Cluster Dashboard
- Genieacs Default Jwt
- Git Web Interface
- Gitea Public Signup
- Gitlist Disclosure
- Global Traffic Statistics
- Glpi Directory Listing
- Gopher Server
- Grafana Public Signup
- Grav Register Admin
- Hadoop Unauth Rce
- Haproxy Exporter Metrics
- Haproxy Status
- Hashicorp Consul Unauth
- Healthchecks Ui Exposure
- Helm Dashboard Exposure
- Hfs Exposure
- Hikvision Env
- Hivequeue Agent
- Hpe System Management Anonymous
- Http Missing Security Headers
- Https To Http Redirect
- Ibm Friendly Path Exposure
- Ibm Websphere Xml
- Imgproxy Unauth
- Ingress Nginx Valid Admission
- Intelbras Dvr Unauth
- Intercom Identity Misconfiguration
- Internal Ip Disclosure
- Iot Vdme Simulator
- Jackett Unauth
- Jaeger Ui Dashboard
- Java Melody Exposed
- Jboss Status
- Jboss Web Service
- Jetty Showcontexts Enable
- Jupyter Ipython Unauth
- Jupyter Lab Unauth
- Jupyter Notebooks Exposed
- Kafka Cruise Control
- Kentico 13 Auth Bypass Wt 2025 0006
- Kentico 13 Auth Bypass Wt 2025 0011
- Kubeflow Dashboard Unauth
- Label Studio Signup
- Laragon Phpinfo
- Laravel Debug Enabled
- Laravel Debug Error
- Laravel Debug Infoleak
- Laravel Horizon Unauth
- Less History
- Libvirt Exporter Metrics
- Lidarr Dashboard Unauth
- Linkerd Ssrf Detect
- Linktap Gateway Exposure
- Locust Exposure
- Lvm Exporter Metrics
- Mailpit App Info Disclosure
- Manage Cabinet Register
- Manage Engine Ad Search
- Mingyu Xmlrpc Sock Adduser
- Misconfigured Concrete5
- Misconfigured Docker
- Missing Sri
- Mixed Active Content
- Mixed Passive Content
- Mlflow Unauth
- Mobiproxy Dashboard
- Mobsf Framework Exposure
- Moleculer Microservices
- Mongod Exposure
- Mongodb Exporter Metrics
- Ms Exchange User Enum
- Multilaser Pro Setup
- Mysql History
- Mysqld Exporter Metrics
- Nacos Authentication Bypass
- Namedprocess Exporter Metrics
- Netalertx Dashboard
- Nextcloud Install
- Ngrok Status Page
- Node Exporter Metrics
- Node Express Dev Env
- Node Express Status
- Nomad Jobs
- Ntfy Web Exposure
- Ntop Panel Exposed
- Ntopng Traffic Dashboard
- Odoo Unprotected Database
- Office365 Open Redirect
- Oneinstack Control Center
- Openstack Config
- Oracle Reports Services
- Pa11Y Dashboard
- Pcdn Cache Node
- Pcoweb Unauth
- Perfsonar Toolkit
- Pghero Dashboard Exposure
- Pgwatch2 Db Exposure
- Php Debugbar Exposure
- Php Errors
- Php Fpm Status
- Php Src Disclosure
- Phpcli Stack Trace
- Phpmemcached Admin Panel
- Phpnow Works
- Pinpoint Unauth
- Postgres Exporter Metrics
- Private Key Exposure
- Prometheus Promtail
- Prowlarr Dashboard Unauth
- Puppetdb Dashboard
- Put Method Enabled
- Python Metrics
- Questdb Console
- Qvidium Management System Exposed
- Rabbitmq Exporter Metrics
- Rack Mini Profiler
- Radarr Dashboard Unauth
- Ray Dashboard
- Readarr Dashboard Unauth
- Redpanda Console
- Rekognition Image Validation
- Repetier Unauth
- Request Baskets Exposure
- Rethinkdb Admin Console
- Root Path Disclosure
- Roxyfileman Fileupload
- S3 Torrent
- Salesforce Aura
- Salesforce Community Misconfig
- Searchreplacedb2 Exposure
- Secnet Info Leak
- Seeyon Unauth
- Selenium Exposure
- Sentinel License Monitor
- Seq Dashboard Unath
- Server Status
- Service Pwd
- Servicenow Title Injection
- Servicenow Widget Misconfig
- Sftpgo Admin Setup
- Shell History
- Sitecore Debug Page
- Sitecore Lfi
- Skycaiji Install
- Slurm Hpc Dashboard
- Smarterstats Setup
- Smokeping Grapher
- Smtp4Dev Interface Exposed
- Solr Query Dashboard
- Sonarqube Projects Disclosure
- Sonarqube Public Projects
- Sonarr Dashboard Unauth
- Sony Bravia Disclosure
- Sound4 Directory Listing
- Spidercontrol Scada Server Info
- Sql Server Report Viewer
- Ssrf Via Oauth Misconfig
- Ssrpm Arbitrary Password Reset
- Struts Ognl Console
- Syncthing Dashboard
- System Properties Exposure
- Tasmota Config Webui
- Tcpconfig
- Teslamate Unauth Access
- Thanos Prometheus Exposure
- Thinkphp Errors
- Tiny File Manager Unauth
- Titannit Web Exposure
- Tls Sni Proxy
- Tomcat Cookie Exposed
- Tomcat Scripts
- Tomcat Stacktraces
- Transmission Dashboard
- Typo3 Composer
- Typo3 Debug Mode
- Unauth Apache Kafka Ui
- Unauth Axyom Network Manager
- Unauth Celery Flower
- Unauth Cyber Power Systems
- Unauth Etherpad
- Unauth Fastvue Dashboard
- Unauth Kubecost
- Unauth Ldap Account Manager
- Unauth Mautic Upgrade
- Unauth Mercurial
- Unauth Opache Control Panel
- Unauth Redis Insight
- Unauth Selenium Grid Console
- Unauth Temporal Web Ui
- Unauth Wavink Panel
- Unauth Zwave Mqtt
- Unauthenticated Alert Manager
- Unauthenticated Glances
- Unauthenticated Glowroot
- Unauthenticated Lansweeper
- Unauthenticated Mongo Express
- Unauthenticated Netdata
- Unauthenticated Nginx Dashboard
- Unauthenticated Popup Upload
- Unauthenticated Prtg
- Unauthenticated Tensorboard
- Unauthenticated Varnish Cache Purge
- Unauthenticated Zipkin
- Unauthorized H3Csecparh Login
- Unauthorized Plastic Scm
- Unauthorized Puppet Node Manager Detect
- Unigui Server Monitor Exposure
- Untangle Admin Setup
- Ups Status
- V2X Control
- Vercel Source Exposure
- Vernemq Status Page
- Viewpoint System Status
- Wamp Server Configuration
- Wamp Xdebug Detect
- Webalizer Statistics
- Webdav Enabled
- Whisparr Dashboard Unauth
- Wildcard Postmessage
- Woodwing Git
- Woodwing Phpinfo
- Wp Registration Enabled
- Xss Deprecated Header
- Zabbix Dashboards Access
- Zabbix Error
- Zenphoto Sensitive Info
- Zhiyuan Oa Unauthorized