LuCI_RCE_exp

EXP of CVE-2019-12272 CVE-2019-12272 is a vulnerablity of LuCI to execute arbitrary bash code. Details https://hachp1.github.io/posts/Web%E5%AE%89%E5%85%A8/20190710-lucirce.html Usage python .\cve-2019-12272bandwidthstatus.py -a 192.168.153.4 -u root -p root -c ls python...

OpenWrt LuCI Input Validation Vulnerability

OpenWrt LuCI is a graphical configuration interface for OpenWrt. An input validation vulnerability exists in OpenWrt LuCI admin/status/realtime/bandwidthstatus and admin/status/realtime/wirelessstatus, which could be exploited by remote attackers to submit a special request that could execute...