Asustor ADM 3.5.9 (AS602T) — Post-Authentication Command Injection in `music.cgi — Detect

Fingerprint / reachability check for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.cgi act=live → Command Execution in the CGI Process !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.c...

Opengear NGCS Firmware 25.11.8 — PDU `name` Command Injection (Authenticated Adm — Detect

Fingerprint / reachability check for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root R"""...

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained — Detect

Fingerprint / reachability check for Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Titan MFT Server 26.0.0 - Unauthenticate...

Kerio Connect Server.startEncryption Command Injection Authenticated RCE — Detect

Fingerprint / reachability check for Kerio Connect Server.startEncryption Command Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Kerio Connect Server.startEncryption Command Injection Authenticated RCE""" from kittysploit import from...

Vicon Valerus Unauthenticated Command Injection RCE — Detect

Fingerprint / reachability check for Vicon Valerus Unauthenticated Command Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Vicon Valerus Unauthenticated Command Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Maian Guardian license generator command injection RCE

Admin ajax-ops=generate — shell expansion in projid writes marker under content/ and runs attacker command. """Maian Guardian license generator command injection RCE.""" from future import annotations import re import uuid from urllib.parse import urlencode from kittysploit import from...

SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM — Detect

Fingerprint / reachability check for SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM !/usr/bin/env python3 -- coding: utf-8 -- r"""Detection for SmarterMail — Antivirus Command-Line Configuration → RCE as NT AUTHORITY\SYSTEM""" from kittysploit import from...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manuf — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manufacturing-Test Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in...

Edimax BR-6478AC formWlanMP command injection root RCE

HTTP Basic POST /goform/formWlanMP — command substitution in ateFunc or other fields reaches system as root. """Edimax BR-6478AC formWlanMP authenticated command injection root.""" from future import annotations import base64 import re from urllib.parse import urlencode from kittysploit import fr...

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the Web

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 """Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor...

CFEngine Hub VCS gitServer injection RCE

OAuth2 admin token then POST /api/vcs/settings injects $cmd into params.sh; execution when masterfiles-stage.sh is sourced hub deploy/cf-agent. !/usr/bin/env python3 -- coding: utf-8 -- """CFEngine Nova Hub VCS settings gitServer command injection.""" from future import annotations import json...

Kerio Connect Server.startEncryption command injection

FullAdmin WebAdmin login then JSON-RPC Server.startEncryption injects into a shell pipeline built from the password field system sink. !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Connect Server.startEncryption password command injection RCE.""" from future import annotations import json...

Lantronix SGX5150 FsBrowseClean command injection root RCE

Authenticated POST ajax=FsBrowseClean with path=x'\n breaks out of ltrxusbumount shell quoting. """Lantronix SGX5150 FsBrowseClean newline command injection root RCE.""" from future import annotations import base64 import re from urllib.parse import urlencode from kittysploit import from...

DrayTek Vigor 2960 uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE multi platform.""" from future import annotations import uuid from kittysploit import...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

Vicon Valerus unauthenticated command injection RCE

Unauthenticated POST to /NVR/api/v1/upgrades/multiformat-file-Execute/start with a JSON-encoded command string triggers OS command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Vicon Valerus unauthenticated command injection RCE.""" from future import annotations import json import re...

Cambium cnMatrix EX3024F — SSL CSR Command Injection (Root RCE) — Detect

Fingerprint / reachability check for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect

Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...

Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in th — Detect

Fingerprint / reachability check for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in the pwrstudio Event Engine Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injectio...

Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE — Detect

Fingerprint / reachability check for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE""" from kittysploit import from...