XSS-CVE-2022-30489

WAVLINK WN535G3 POST XSS Use CVE-2022-30489 PAYLOAD POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 Windows NT 10.0;...

cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS v3.1: 9.8 Critical Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated attackers to gain full administrative access to the control panel. The vulnerability was exploited in t...

CVE-2026-76070

CVE-2026-76070: Unauthenticated Pre-Auth Stack Buffer Overflow via Base64-Decoded Password in Netis NC63 login.cgi Leading to RCE Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76070 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 Wireless AC1200 Router Tested firmware:...

Exploit for CVE-2026-76070

CVE-2026-76070: Unauthenticated Pre-Auth Stack Buffer Overflow...

D-Link DSL-2750B RCE

Module exploits remote code execution vulnerability in D-Link DSL-2750B devices. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2750B RCE""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import Handler class ModuleExploit,...

Ubiquiti AirOS 6.x - SSH Key Upload

Path traversal file upload via /login.cgi places an attacker SSH public key into /etc/dropbear/authorizedkeys, enabling login as ubnt. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti AirOS 6.x arbitrary file upload to authorizedkeys.""" from future import annotations import io import tempfi...

Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the login.cgi endpoint. The issue results from improper...

D-Link DSL - login.cgi CLI RCE Detection (CVE-2016-20017)

Detects CVE-2016-20017 by injecting cat /etc/passwd into login.cgi?cli= and checking for passwd contents. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL login.cgi CLI command injection CVE-2016-20017.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Crestron AirMedia - login.cgi LFI Detection (CVE-2016-5639)

Detects CVE-2016-5639 by requesting login.cgi?src=../../../../etc/shadow on Crestron AirMedia devices. !/usr/bin/env python3 -- coding: utf-8 -- """Crestron AirMedia login.cgi path traversal CVE-2016-5639.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

FXC Router - Default Credentials (admin/admin)

Detects FXC and related router web UIs accepting default credentials admin:admin via /cgi-bin/login.apply or /cgi/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """FXC router HTTP default credentials admin:admin.""" import time from datetime import datetime, timezone from kittysploit import...

Wavlink WN-535G3 - Cross-Site Scripting Detection

Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/log.""" from kittysploit...

Huawei HG532e Default Credential Detection

Huawei HG532e default admin credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG532e default admin credentials were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Huawei...

Thruk Monitoring Webinterface - Cross-Site Scripting Detection

Thruk Monitoring Webinterface contains a cross-site scripting vulnerability via the login parameter at /thruk/cgi-bin/login.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Thruk Monitoring Webinterface contains a cross-site scripting vulnerability via the login parameter at /thruk/.""" from...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

CVE-2025-71317: Use of Hard-coded Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

CVE-2026-8230

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function syslogin1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Th...

CVE-2026-8230 Wavlink NU516U1 login.cgi sys_login1 os command injection

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function syslogin1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Th...

CVE-2026-8230

CVE-2026-8230 affects Wavlink NU516U1 240425. The vulnerability lies in the /cgi-bin/login.cgi file, within the function called sys_login1, where manipulating the ipaddr argument can trigger an OS command injection. This allows remote attackers to execute commands on the device. Exploitation is p...

CVE-2026-8230 Wavlink NU516U1 login.cgi sys_login1 os command injection

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function syslogin1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Th...

PT-2026-39456

Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 version 240425 Description A flaw in the sys login1 function within the '/cgi-bin/login.cgi' endpoint allows for remote OS command injection. This occurs through the manipulation of the ipaddr argument, which could lead to full...