AirLive cgi_test.cgi RCE (CVE-2015-2279)

Exploits CVE-2015-2279 OS command injection in /cgitest.cgi via the writetan parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AirLive cgitest.cgi command injection RCE CVE-2015-2279 — execute session.""" from future import annotations import re from...

AirLive - cgi_test.cgi RCE Detection (CVE-2015-2279)

Detects AirLive OS command injection via /cgitest.cgi?writetan&;id&id MD/BU models or manufacture Basic-auth wirelessmft WL/POE models. !/usr/bin/env python3 -- coding: utf-8 -- """AirLive Boa cgitest.cgi OS command injection CVE-2015-2279.""" import base64 import re from kittysploit import from...

cgi_test.cgi Arbitrary Command Execution

The vulnerability in cgitest.cgi of the built-in microprogramming software for AirLive BU-3026, AirLive BU-2015, and AirLive MD-3025 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious...

Design/Logic Flaw

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

CVE-2015-2279: Improper Neutralization of Special Elements used in an OS Command

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

AirLive IP Monitor Command Injection Vulnerability

Airlive is an IP surveillance network solution provider and security product vendor. An OS command injection vulnerability exists in the cgitest.cgi binary file when the AirLive MD-3025, BU-3026, BU-2015 cameras process certain parameters. An attacker can exploit this vulnerability to inject...