Telaeris XPressEntry unauthenticated SQLi RCE

Unauthenticated POST /activities injects stacked T-SQL via sNotes to enable xpcmdshell and run attacker commands on the backend SQL Server. !/usr/bin/env python3 -- coding: utf-8 -- """Telaeris XPressEntry unauthenticated SQL injection to xpcmdshell.""" from future import annotations import uuid...

Telaeris XPressEntry Unauthenticated SQL Injection RCE — Detect

Fingerprint / reachability check for Telaeris XPressEntry Unauthenticated SQL Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Telaeris XPressEntry Unauthenticated SQL Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...