97226 matches found
PineApp Mail-SeCure test_li_connection RCE
Exploits command injection in PineApp Mail-SeCure via the iptest parameter on /admin/testliconnection.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php RCE — execute session.""" from future import annotations import re...
ALCASAR Host Header RCE
Exploits ALCASAR command injection via a crafted Host header on /alcasar/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host header command injection RCE — execute session.""" from future import annotations import re from kittysploit import...
EditWrxLite - wrx.cgi RCE
Exploits EditWrxLite command injection via the download parameter of wrx.cgi. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """EditWrxLite wrx.cgi command injection RCE — execute session.""" from future import annotations import re from urllib.parse import quote...
Sangfor EDR - slog_client RCE
Exploits unauthenticated command injection in Sangfor EDR 3.2.17R1/3.2.21 via /api/edr/sangforinter/v2/cssp/slogclient JSON params. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor EDR 3.2.17R1/3.2.21 slogclient RCE — execute session.""" from future impor...
Gitlist blame RCE (CVE-2014-4511)
Exploits CVE-2014-4511 command injection in Gitlist blame paths via backtick-wrapped shell metacharacters. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Gitlist blame path command injection RCE CVE-2014-4511 — execute session.""" from future import annotations...
CERIO DT - Save.cgi Command Injection RCE
Exploits command injection in the ip field of /cgi-bin/Save.cgi PING operation on CERIO DT series routers. Requires default operator credentials. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """CERIO DT series router Save.cgi command injection — execute...
D-Link DNS-320/325 - system_mgr.cgi SMS Test RCE
Exploits command injection in cgismstest via the command1 parameter on /cgi-bin/systemmgr.cgi distinct from CVE-2020-25506 NTP injection. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DNS-320/325 systemmgr.cgi SMS test RCE — execute session.""" from...
Webmin password_change.cgi RCE (CVE-2019-15107)
Exploits CVE-2019-15107 unauthenticated command injection in the passwordchange.cgi "old" parameter Webmin = 1.920. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin passwordchange.cgi RCE CVE-2019-15107 — execute session.""" from future import annotations...
AirLive cgi_test.cgi RCE (CVE-2015-2279)
Exploits CVE-2015-2279 OS command injection in /cgitest.cgi via the writetan parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AirLive cgitest.cgi command injection RCE CVE-2015-2279 — execute session.""" from future import annotations import re from...
OmniPCX - masterCGI RCE (CVE-2007-3010)
Exploits CVE-2007-3010 by injecting OS commands into the user parameter of /cgi-bin/masterCGI. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Alcatel-Lucent OmniPCX masterCGI RCE CVE-2007-3010 — execute session.""" from future import annotations import re from...
WANem result.php RCE (CVE-2012-10041)
Exploits CVE-2012-10041 command injection in WANem result.php via the pc parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """WANem result.php command injection RCE CVE-2012-10041 — execute session.""" from future import annotations import re from...
Apache Spark doAs Command Injection RCE (CVE-2022-33891)
Exploits CVE-2022-33891 command injection in the Spark ACL check when spark.acls.enable is true. Sends a crafted doAs POST parameter to run arbitrary shell commands as the Spark process user. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Spark doAs command injection RCE CVE-2022-33891 —...
Mundi Mail mypid Command Injection RCE
Exploits command injection in Mundi Mail via the mypid parameter on /admin/status/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Mundi Mail mypid command injection — execute session.""" from future import annotations import re from kittysploit import...
PhpWiki Ploticus RCE (CVE-2014-5519)
Exploits CVE-2014-5519 command injection in the Ploticus device attribute via edit preview on index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PhpWiki Ploticus device command injection RCE CVE-2014-5519 — execute session.""" from future import...
Monitorix Pipe RCE (CVE-2013-7070)
Exploits CVE-2013-7070/7071 by injecting commands into pipe-wrapped Monitorix URL paths. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Monitorix pipe path command injection RCE CVE-2013-7070 — execute session.""" from future import annotations import re from...
VICIdial manager_send.php RCE (CVE-2013-4468)
Exploits CVE-2013-4468 command injection via the extension parameter on /agc/managersend.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """VICIdial managersend.php command injection RCE CVE-2013-4468 — execute session.""" from future import annotations import...
Basilic diff.php RCE
Exploits command injection in Basilic = 1.5.14 via the file parameter on /Config/diff.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Basilic Config/diff.php command injection RCE — execute session.""" from future import annotations import re from...
ESVA - learn-msg.cgi RCE (CVE-2012-10046)
Exploits CVE-2012-10046 by injecting OS commands into the id parameter of /cgi-bin/learn-msg.cgi. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ESVA learn-msg.cgi command injection CVE-2012-10046 — execute session.""" from future import annotations import re...
Narcissus - backend.php RCE (CVE-2012-10033)
Exploits CVE-2012-10033 by injecting OS commands into the release parameter of backend.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Narcissus backend.php command injection CVE-2012-10033 — execute session.""" from future import annotations import re from...
