vBulletin 5.5.4 - 5.6.2- Remote Command Execution Detection

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin versions 5."""...

Spring Security OAuth2 Remote Command Execution Detection

Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...

NUUO NVRmini - Remote Command Execution Detection

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini is vulnerable to...

Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution Detection

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed. !/usr/bin/env python3 -- coding: utf-8 -- """Intellian Aptus W...

PHP-Fusion 9.03.50 - Remote Code Execution Detection

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """PHP-Fusion 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

SAP Solution Manager 7.2 - Remote Command Execution Detection

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Zeroshell 3.9.0 - Remote Command Execution Detection

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters. !/usr/bin/env python3 -...

vBulletin 5.0.0-5.5.4 - Remote Command Execution Detection

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

Webmin <= 1.920 - Unauthenticated Remote Command Execution Detection

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin =1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

TamronOS IPTV/VOD - Remote Command Execution Detection

TamronOS IPTV/VOD contains a remote command execution in the 'host' parameter of the /api/ping endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """TamronOS IPTV/VOD contains a remote command execution in the 'host' parameter of the /api/ping endpoint.""" import re from kittysploit import from...

Synway SMG Gateway 9-2radius.php - Remote Command Execution Detection

Synway SMG Gateway Management Software contains a remote command execution vulnerability in 9-2radius.php, where the radiusaddress parameter is passed to a system call without sanitization. This allows unauthenticated attackers to execute arbitrary commands on the server. !/usr/bin/env python3 --...

Ruijie EG Easy Gateway - Remote Command Execution Detection

Ruijie EG Easy Gateway login.php has remote commmand execution vulnerability, which can lead to the disclosure of administrator account and password. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie EG Easy Gateway login.""" from kittysploit import from lib.protocols.http.httpclient import...

TOTOLink Router - Remote Command Execution Detection

TOTOLink routers are vulnerable to unauthenticated remote command execution via the /boaform/formWsc endpoint. An attacker can inject OS commands through the localPin parameter. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLink routers are vulnerable to unauthenticated remote command executio...

Inspur Clusterengine V4 SYSshell - Remote Command Execution Detection

Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design. !/usr/bin/env python3 -- coding: utf-8 -- """Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design.""" import re from kittysploit import from lib.protocols.http.httpclient...

Apache Struts 2 - Remote Command Execution Detection

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

Telesquare TLR-2005KSH - Remote Command Execution Detection

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from South Korea's Telesquare company.Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 have an unauthorized remote command execution vulnerability. An attacker can exploit this vulnerability to execute system commands without authorization through...

Jupyter Notebook - Remote Command Execution Detection

Jupyter Notebook is an interactive Notebook, computer application is a web based visualization, Jupyter Notebook API/terminals path there are loopholes in the remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Jupyter Notebook is an interactive Notebook, computer application i...

Xerox Printers Clone File OS Command Injection (CVE-2021-28673)

Xerox Phaser 6510 before 64.61.23 and 64.59.11 Bridge, WorkCentre 6515 before 65.61.23 and 65.59.11 Bridge, VersaLink B400 before 37.61.23 and 37.59.01 Bridge, B405 before 38.61.23 and 38.59.01 Bridge, B600/B610 before 32.61.23 and 32.59.01 Bridge, B605/B615 before 33.61.23 and 33.59.01 Bridge,...

Xerox Printers Remote Command Execution (CVE-2021-28671)

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

Summary The AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...