Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX-Breaker PoC y código automatizado para explotar CVE-20...

D-Link DNS-320 login_mgr RCE (CVE-2019-16057)

Exploits CVE-2019-16057 in D-Link DNS-320 str: inj = urllib.parse.quotef'80|cmd', safe='' p...

TOTOLINK A3700R Command Injection (CVE-2023-46574)

Exploits CVE-2023-46574 in TOTOLINK A3700R: command injection in the FileName parameter of UploadFirmwareFile via /cgi-bin/cstecgi.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """TOTOLINK A3700R firmware upload command injection CVE-2023-46574.""" import json import re from kittysploit import...

Honeywell PM43 Printer RCE (CVE-2023-3710)

Exploits CVE-2023-3710 in Honeywell PM43 printers: newline injection in the username field of loadfile.lp login executes OS commands. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell PM43 loadfile command injection CVE-2023-3710.""" import re from kittysploit import from...

NUUO NVRmini Command Injection (CVE-2018-14933)

Exploits CVE-2018-14933 in NUUO NVRmini via command injection in the uploaddir parameter of upgradehandle.php. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini upgradehandle.php RCE CVE-2018-14933.""" import re import urllib.parse from kittysploit import from lib.protocols.http.httpclien...

Zyxel NAS remote_help RCE (CVE-2024-29972)

Exploits CVE-2024-29972 in Zyxel NAS326/NAS542: unauthenticated command injection in remotehelp-cgi NsaRescueAngel backdoor path yields root command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS remotehelp-cgi command injection CVE-2024-29972.""" import re import urllib.parse...

MajorDoMo Admin Console RCE (CVE-2026-27174)

Exploits CVE-2026-27174 in MajorDoMo: unauthenticated access to the admin PHP console via /admin.php?ajaxpanel=1&op=console&command= allows arbitrary PHP/code execution. !/usr/bin/env python3 -- coding: utf-8 -- """MajorDoMo unauthenticated admin console PHP execution CVE-2026-27174.""" import re...

Citrix NetScaler Pre-Auth Command Injection (CVE-2026-88771)

Exploits CVE-2026-88771 in Citrix NetScaler ADC/Gateway: attacker-controlled login values are logged and later interpolated into nsmonuploadderr.pl shell commands, yielding root command execution. Sends the pitboss/PPE log-poisoning payload via /nf/auth/doAuthentication.do watchTowr pattern...

NETGEAR Router cgi-bin RCE (CVE-2016-6277)

Exploits CVE-2016-6277 in multiple NETGEAR routers: shell metacharacters in the cgi-bin path segment yield unauthenticated command execution. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router cgi-bin path command injection CVE-2016-6277.""" import re from kittysploit import from...

Ivanti Connect Secure Command Injection (CVE-2024-21887)

Chains CVE-2023-46805 path traversal auth bypass with CVE-2024-21887 command injection via /api/v1/totp/user-backup-code/../../admin/config/set on Ivanti Connect Secure / Policy Secure gateways. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure auth bypass + command injection...

Palo Alto GlobalProtect Command Injection (CVE-2024-3400)

Exploits CVE-2024-3400 in PAN-OS GlobalProtect: SESSID path traversal writes into devicetelemetry cron directories, yielding root command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Palo Alto GlobalProtect PAN-OS command injection CVE-2024-3400.""" import secrets import time from...

Telesquare TLR-2005KSH RCE (CVE-2024-29269)

Exploits CVE-2024-29269 in Telesquare TLR-2005KSH LTE routers: unauthenticated command injection via Cmd parameter in sysCommand. !/usr/bin/env python3 -- coding: utf-8 -- """Telesquare TLR-2005KSH command injection CVE-2024-29269.""" import re import urllib.parse from kittysploit import from...

D-Link Router Sip Parameter RCE (CVE-2018-10823)

Exploits CVE-2018-10823 in D-Link DWR routers: command injection via the Sip parameter on chkisg.htm. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link router chkisg.htm command injection CVE-2018-10823.""" import re import urllib.parse from kittysploit import from lib.protocols.http.httpclient...

Yealink DM Command Injection RCE (CVE-2021-27561)

Exploits CVE-2021-27561 in Yealink Device Management 3.6.0.20: unauthenticated command injection via /sm/api/v1/firewall/zone/services zone parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Yealink DM firewall zone command injection CVE-2021-27561.""" import re import urllib.parse from...

D-Link DAR-8000 Command Injection (CVE-2023-4542)

Exploits CVE-2023-4542 in D-Link DAR-8000-10: OS command injection via the id parameter of /app/sys1.php. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DAR-8000 sys1.php command injection CVE-2023-4542.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

NETGEAR DGN syscmd RCE (CVE-2024-12847)

Exploits CVE-2024-12847 in NETGEAR DGN routers: unauthenticated command injection via setup.cgi todo=syscmd&cmd= parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR DGN setup.cgi syscmd RCE CVE-2024-12847.""" import re import urllib.parse from kittysploit import from...

Yachtcontrol systemcall RCE (CVE-2019-17270)

Exploits CVE-2019-17270 in Yachtcontrol webapplication 1.0: unauthenticated OS command injection via /pages/systemcall.php?command=. !/usr/bin/env python3 -- coding: utf-8 -- """Yachtcontrol systemcall.php command injection CVE-2019-17270.""" import re import urllib.parse from kittysploit import...

Kemp LoadMaster Command Injection (CVE-2024-1212)

Exploits CVE-2024-1212 in Progress Kemp LoadMaster: unauthenticated command injection via /access/set?param=enableapi&value=... management API. !/usr/bin/env python3 -- coding: utf-8 -- """Progress Kemp LoadMaster unauth command injection CVE-2024-1212.""" import re import urllib.parse from...