Ubiquiti AirOS 6.x - SSH Key Upload

Path traversal file upload via /login.cgi places an attacker SSH public key into /etc/dropbear/authorizedkeys, enabling login as ubnt. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti AirOS 6.x arbitrary file upload to authorizedkeys.""" from future import annotations import io import tempfi...

Ubiquiti AirOS - Unauthenticated CLI RCE Detection

Detects AirOS unauth RCE by POSTing multipart exec=cat /etc/passwd&action=cli to /admin.cgi/sd.css with a forged AIROSSESSIONID cookie. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AirOS unauth RCE by POSTing multipart exec=cat /etc/passwd&action=cli to /admin.""" import re from kittysplo...

Ubiquiti AirOS - Unauthenticated CLI RCE

Exploits AirOS unauthenticated CLI execution via multipart POST to admin.cgi/sd.css with a forged AIROSSESSIONID cookie. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti AirOS unauthenticated CLI RCE.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

AirOS Panel - Detect

AirOS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """AirOS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AirOS Panel - Detect', 'description': 'AirOS panel was detected.',...

EUVD-2026-29734

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to...

EUVD-2020-29055

Malware in sbrugna...

EUVD-2020-29054

Malware in sbrugna...

EUVD-2020-29052

Malware in sbrugna...

CVE-2020-8171

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to...

CVE-2020-8170

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scriptin...

Ubiquiti AirOS Command Injection (CVE-2010-5330)

A command injection vulnerability exists in Ubiquiti AirOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Ubiquiti Networks AirOS Operating System Command Injection Vulnerability

Ubiquiti Networks AirOS is a suite of operating systems for Ubiquiti network devices from Ubiquiti Networks. A command injection vulnerability exists in Ubiquiti Networks AirMax AirOS TI, XW, and XM boards using firmware version 6.2.0 and earlier. A remote attacker could exploit the vulnerability...

Ubiquiti Networks AirOS Cross-Site Scripting Vulnerability

Ubiquiti Networks AirOS is a suite of operating systems for Ubiquiti network devices from Ubiquiti Networks. A cross-site scripting vulnerability exists in Ubiquiti Networks AirMax AirOS TI, XW, and XM boards using firmware version 6.2.0 and earlier. An attacker could exploit the vulnerability to...

Ubiquiti Networks AirOS Cross-Site Request Forgery Vulnerability

Ubiquiti Networks AirOS is a suite of operating systems for Ubiquiti network devices from Ubiquiti Networks. A cross-site request forgery vulnerability exists in Ubiquiti Networks AirMax AirOS TI, XW, and XM boards using firmware version 6.2.0 and earlier. An attacker could exploit this...

CVE-2020-8171

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to...

CVE-2020-8168

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site reques...

CVE-2020-8171

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to...

CVE-2020-8168

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site reques...

CVE-2020-8170

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scriptin...

Command injection

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to...