CVE-2026-78796: Improper Neutralization of Special Elements used in an OS Command

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router is vulnerable in versions v1.3.241114.024540 and before . A remote attacker can achieve arbitrary code execution by targeting the www extbackslash extbackslash cgi-bin extbackslash extbackslash upgrade file. The vulnerabili...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...

CVE-2026-105484

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

EUVD-2026-92908

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

PT-2026-106300

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description An OS command injection flaw exists in the UploadFirmwareFile Handler component. A remote, unauthenticated attacker can exploit this by manipulating the file name parameter within the...

Intelbras Switch Config Leak (CVE-2023-36144)

Exploits CVE-2023-36144 in Intelbras SG 2404 MR: unauthenticated GET to /cgi-bin/exportCfgwithpasswd downloads full device backup with credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Intelbras Switch config export leak CVE-2023-36144.""" from kittysploit import from...

NETGEAR Router cgi-bin RCE (CVE-2016-6277)

Exploits CVE-2016-6277 in multiple NETGEAR routers: shell metacharacters in the cgi-bin path segment yield unauthenticated command execution. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router cgi-bin path command injection CVE-2016-6277.""" import re from kittysploit import from...

TOTOLINK A3700R Command Injection (CVE-2023-46574)

Exploits CVE-2023-46574 in TOTOLINK A3700R: command injection in the FileName parameter of UploadFirmwareFile via /cgi-bin/cstecgi.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLINK A3700R firmware upload command injection CVE-2023-46574.""" import json import re from kittysploit import...

BOA Web Server LFI (CVE-2017-9833)

Exploits CVE-2017-9833 in BOA Web Server 0.94.14 common in IP cameras/DVRs: FILECAMERA traversal in /cgi-bin/wapopen reads arbitrary files as root. !/usr/bin/env python3 -- coding: utf-8 -- """BOA Web Server FILECAMERA LFI CVE-2017-9833.""" import re import urllib.parse from kittysploit import fr...

Cisco RV320 Config Leak (CVE-2019-1653)

Exploits CVE-2019-1653 in Cisco RV320/RV325: unauthenticated GET to /cgi-bin/config.exp downloads the full router configuration including credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco RV320/RV325 config disclosure CVE-2019-1653.""" from kittysploit import from...

DrayTek Router RCE (CVE-2020-8515)

Exploits CVE-2020-8515 in DrayTek Vigor routers: unauthenticated command injection via keyPath in /cgi-bin/mainfunction.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek mainfunction.cgi command injection CVE-2020-8515.""" import re from kittysploit import from lib.protocols.http.httpclie...

Visual Tools DVR Shellshock RCE (CVE-2021-42071)

Exploits CVE-2021-42071 in Visual Tools DVR VX16: Shellshock in User-Agent on /cgi-bin/slogin/login.py yields unauthenticated command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Visual Tools DVR Shellshock RCE CVE-2021-42071.""" import re from kittysploit import from...

Zyxel GS1900 CGI Stack Overflow RCE (CVE-2026-7273)

Exploits CVE-2026-7273 pre-authentication stack-based buffer overflow in Zyxel GS1900 smart-managed switch CGI handlers. Sends an oversized HTTP POST to /cgi-bin/dispatcher.cgi and alternate CGI endpoints to trigger memory corruption and attempt command execution. Firmware = 2.90XXXX.1C0 is...

WAVLINK Router Credential Leak (CVE-2022-31847)

Exploits CVE-2022-31847 in WAVLINK WN579: unauthenticated GET to /cgi-bin/ExportAllSettings.sh exposes admin Login/Password and Wi-Fi keys. !/usr/bin/env python3 -- coding: utf-8 -- """WAVLINK ExportAllSettings credential leak CVE-2022-31847.""" from kittysploit import from...

Zyxel NAS weblogin RCE (CVE-2020-9054)

Exploits CVE-2020-9054 in Zyxel NAS firmware 5.21: pre-auth command injection via the username parameter of /cgi-bin/weblogin.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS weblogin.cgi command injection CVE-2020-9054.""" import re import urllib.parse from kittysploit import from...

VulnCheck KEV: CVE-2025-3759

Endpoint /cgi-bin-igd/netcoreset.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing. The vendor was contacted early about this disclosure but d...

Netcore NAP930 CVE-2026-102240 Detect

Detects CVE-2026-102240 in Netcore NAP930 access points: pre-auth command injection in /cgi-bin/networktools via eval on raw QUERYSTRING before the sid session check. Confirms endpoint presence and optionally writes a marker file to /www/ when activeprobe is enabled. !/usr/bin/env python3 --...

EUVD-2026-88606

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...

PT-2026-102435

Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description Remote OS command injection is possible within the Network Tools CGI component. The issue exists in the eval function of the '/www/cgi-bin/network tools' endpoint, where improper handling of...