Samsung WLAN AP WEA453e - Pre-Auth RCE

Exploits pre-authentication command execution on Samsung WLAN AP WEA453e via command1=shell: on /download/, then reads output through the download handler. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e pre-auth RCE — execute session."""...

D-Link DIR-823G - EXCU_SHELL RCE Detection (CVE-2023-26613)

D-Link DIR-823G processes HTTP headers Command1/Confirm1 on /EXCUSHELL, allowing unauthenticated OS command execution CVE-2023-26613. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL command injection CVE-2023-26613.""" import re from kittysploit import from...

D-Link DIR-823G - EXCU_SHELL Command Injection (CVE-2023-26613)

Exploits unauthenticated OS command injection on D-Link DIR-823G via /EXCUSHELL headers Command1/Confirm1. Command output is returned in the HTTP response; opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL unauthenticated RCE CVE-2023-266...

CVE-2025-34068: Missing Authentication for Critical Function

An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are...

CVE-2024-2642: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...

Ruijie Networks RG-NBS2009G-P Command Injection Vulnerability

The Ruijie Networks RG-NBS2009G-P is a network security product from China's Ruijie Networks that is commonly used as an enterprise-class network border firewall. The Ruijie Networks RG-NBS2009G-P suffers from a command injection vulnerability that originates from an unknown function in /EXCUSHEL...

CVE-2019-6288

Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /EXCUSHELL URI...

CVE-2019-6288: Improper Neutralization of Special Elements used in a Command

Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /EXCUSHELL URI...

PT-2021-9121

Name of the Vulnerable Software and Affected Versions Edgecore ECS2020 Firmware version 1.0.0.0 Description The issue allows for Unauthenticated Command Injection via the command1 HTTP header to the "/EXCU SHELL" URI. Recommendations For Edgecore ECS2020 Firmware version 1.0.0.0, as a temporary...

MS Visual Basic Enterprise Ed. 6 SP6 DSR File Local BOF Exploit

Exploit for unknown platform in category local exploits =============================================================== MS Visual Basic Enterprise Ed. 6 SP6 DSR File Local BOF Exploit =============================================================== usage: exploit.py print...