FUXA <= 1.2.8 Authentication Bypass + RCE (CVE-2025-69985)

Unauthenticated access to the protected /api/runscript endpoint when authentication is enabled, followed by remote command execution via Node.js childprocess.execSync in script code. Fixed in FUXA 1.2.8. !/usr/bin/env python3 -- coding: utf-8 -- import re from kittysploit import from...