Ruijie EG Easy Gateway - Remote Command Execution Detection

Ruijie EG Easy Gateway login.php has remote commmand execution vulnerability, which can lead to the disclosure of administrator account and password. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie EG Easy Gateway login.""" from kittysploit import from lib.protocols.http.httpclient import...

Apache Struts - OGNL Console Detection

This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution.""" from kittysploit import fr...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution Detection

nginxWebUI’s runCmd feature and is caused by incomplete validation of user input. Attackers can exploit the vulnerability by crafting malicious data to execute arbitrary commands on a vulnerable server without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """nginxWebUI’s runCmd feature...

nginxWebUI ≤ 3.5.0 - Remote Command Execution Detection

There is a command execution vulnerability in the nginxWebUI backend. After logging in to the backend, the attacker can execute any command to obtain server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """There is a command execution vulnerability in the nginxWebUI backend.""" import re...

NUUO NVRmini - Remote Command Execution Detection

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini is vulnerable to...

Kibana - Local File Inclusion Detection

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

vBulletin 5.0.0-5.5.4 - Remote Command Execution Detection

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

Progress Kemp LoadMaster - Command Injection Detection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated remote attackers can access the system through the LoadMaster management interface, enablin...

CERIO-DT Interface - Command Execution Detection

CERIO DT series routers have an operation command injection vulnerability in specific versions. An attacker could exploit this vulnerability to execute commands. !/usr/bin/env python3 -- coding: utf-8 -- """CERIO DT series routers have an operation command injection vulnerability in specific...

vBulletin 5.5.4 - 5.6.2- Remote Command Execution Detection

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin versions 5."""...

Artica Pandora FMS 7.44 - Remote Code Execution Detection

Artica Pandora FMS 7.44 allows remote command execution via the events feature. !/usr/bin/env python3 -- coding: utf-8 -- """Artica Pandora FMS 7.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Artica...

PHP-Fusion 9.03.50 - Remote Code Execution Detection

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-Fusion 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution Detection

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed. !/usr/bin/env python3 -- coding: utf-8 -- """Intellian Aptus W...

Webmin <= 1.920 - Unauthenticated Remote Command Execution Detection

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin =1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Spring Security OAuth2 Remote Command Execution Detection

Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...

SAP Solution Manager 7.2 - Remote Command Execution Detection

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Apache Struts 2 - Remote Command Execution Detection

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

Telesquare TLR-2005KSH - Remote Command Execution Detection

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from South Korea's Telesquare company.Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 have an unauthorized remote command execution vulnerability. An attacker can exploit this vulnerability to execute system commands without authorization through...