RCDevs WebADM logfile_viewer sid command injection RCE

Post-auth OS command injection in admin/logfileviewer.php sid parameter grep -E popen sink; proof via log readback. """RCDevs WebADM 2.4.14 - OS Command Injection in the Log Viewer sid Parameter CWE-78""" from future import annotations from kittysploit import from lib.protocols.http.httpclient...

Asustor ADM 3.5.9 (AS602T) — Post-Authentication Command Injection in `music.cgi — Detect

Fingerprint / reachability check for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.cgi act=live → Command Execution in the CGI Process !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.c...

Opengear NGCS Firmware 25.11.8 — PDU `name` Command Injection (Authenticated Adm — Detect

Fingerprint / reachability check for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root R"""...

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained — Detect

Fingerprint / reachability check for Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Titan MFT Server 26.0.0 - Unauthenticate...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Confi — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Configuration Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the...

Kerio Connect Server.startEncryption Command Injection Authenticated RCE — Detect

Fingerprint / reachability check for Kerio Connect Server.startEncryption Command Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Kerio Connect Server.startEncryption Command Injection Authenticated RCE""" from kittysploit import from...

Vicon Valerus Unauthenticated Command Injection RCE — Detect

Fingerprint / reachability check for Vicon Valerus Unauthenticated Command Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Vicon Valerus Unauthenticated Command Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Maian Guardian license generator command injection RCE

Admin ajax-ops=generate — shell expansion in projid writes marker under content/ and runs attacker command. """Maian Guardian license generator command injection RCE.""" from future import annotations import re import uuid from urllib.parse import urlencode from kittysploit import from...

Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect

Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...

TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reachi — Detect

Fingerprint / reachability check for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Serv...

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the Web

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 """Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor...

CFEngine Hub VCS gitServer injection RCE

OAuth2 admin token then POST /api/vcs/settings injects $cmd into params.sh; execution when masterfiles-stage.sh is sourced hub deploy/cf-agent. !/usr/bin/env python3 -- coding: utf-8 -- """CFEngine Nova Hub VCS settings gitServer command injection.""" from future import annotations import json...

Kerio Connect Server.startEncryption command injection

FullAdmin WebAdmin login then JSON-RPC Server.startEncryption injects into a shell pipeline built from the password field system sink. !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Connect Server.startEncryption password command injection RCE.""" from future import annotations import json...

Lantronix SGX5150 FsBrowseClean command injection root RCE

Authenticated POST ajax=FsBrowseClean with path=x'\n breaks out of ltrxusbumount shell quoting. """Lantronix SGX5150 FsBrowseClean newline command injection root RCE.""" from future import annotations import base64 import re from urllib.parse import urlencode from kittysploit import from...

DrayTek Vigor 2960 uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE multi platform.""" from future import annotations import uuid from kittysploit import...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

Vicon Valerus unauthenticated command injection RCE

Unauthenticated POST to /NVR/api/v1/upgrades/multiformat-file-Execute/start with a JSON-encoded command string triggers OS command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Vicon Valerus unauthenticated command injection RCE.""" from future import annotations import json import re...

Cambium cnMatrix EX3024F — SSL CSR Command Injection (Root RCE) — Detect

Fingerprint / reachability check for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect

Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...

Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in th — Detect

Fingerprint / reachability check for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in the pwrstudio Event Engine Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injectio...