3Com OfficeConnect RCE

Module exploits 3Com OfficeConnect remote command execution vulnerability which allows executing command on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """3Com OfficeConnect RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

CVE-2014-8387: Improper Neutralization of Special Elements used in an OS Command

cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi...