CVE-2024-24386

VitalPBX - CVE-2024-24386 Vulnerability Title: Command Injection Author: Erick Duarte Version: 3.2.5-2 The vulnerability occurs when using the Task Manager module in conjunction with Cron Profile. To exploit this vulnerability, we need to place a script in a specific folder within the OS. The...

hacker-scripts

English | 简体中文 Hacker Scripts Based on a true story : xxx: OK, so, our build engineer has left for another company. The dude was literally living inside the terminal. You know, that type of a guy who loves Vim, creates diagrams in Dot and writes wiki-posts in Markdown... If something - anything -...

CVE-2022-39952

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...

dawgmon

dawgmon - Dawg the Hallway Monitor SUMMARY The name of this tool is based upon an episode season 10, episode 10 of South Park in which Cartman is Dawg the Hallway Monitor patrolling the hallways of his school. It's a tool which helps one to monitor changes which have taken place on a Linux-based...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX 预认证 SQL 注入到远程代码执行 针对 CVE-2025-57819 的一体化利用工具，该漏洞是 FreePBX 端点模块中未经认证的 SQL 注入漏洞，可通过 cron 任务注入实现远程代码执行。 CVSS : 9.8（严重）— CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : 2025 年 8 月 29 日添加 受影响版本 : Sangoma FreePBX 15、16、17，且端点模块版本 │ ▼ 向 cronjobs 表进行 SQL 注入...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha 监控通过 Cron API 授权绕过实现跨租户 RCE 一个用于复现和检测 CVE-2026-46716 的实验室环境。该漏洞是 Nezha 监控中的一个严重漏洞：POST /api/v1/cron 端点缺少管理员权限检查，使 RoleMember 用户能够实现跨租户远程代码执行。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-46716 GHSA| GHSA-99gv-2m7h-3hh9 CVSS| 9.9（严重）— AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 受影响版本|...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

CVE-2026-49995

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...

CVE-2026-55159 luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries

luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound. Prior to 1.2.4-2, the luci.adblock-fast.setCronEntry RPC method accepts an entry argument containing carriage-return or line-feed characters and serializes it into...

CVE-2026-55159

CVE-2026-55159 affects luci-app-adblock-fast , a WebUI for a DNS-based ad-blocker on OpenWrt (compatible with dnsmasq, smartdns, or unbound). Prior to 1.2.4-2 , the luci.adblock-fast.setCronEntry RPC method fails to sanitize carriage-return or line-feed characters in its entry argument, serializi...

CVE-2026-49995

Tautulli , a Python-based monitoring and tracking tool for Plex Media Server, contains a stored XSS in the newsletter configuration. Prior to version 2.17.2, the newsletter cron field in the newsletters database table is inserted into a JavaScript string within newsletter_config.html without safe...

CVE-2026-49995 Tautulli: Stored Cross-Site Scripting (XSS) in the newsletter

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interfaces/default/newsletterconfig.html into a JavaScript string without safe JSON encoding. An administrator or caller wi...

poc_monitor

pocmonitor A short scraper looking for a POC of CVE-2024-49112 Setting a cron job to run the script every 4 hours will keep the updates in place. The alerting can be customized but used Discord webhook to alert a Discord channel. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py...

cve-2025-57819-exploit

CVE-2025-57819 漏洞利用工具 元数据 严重性: 严重 9.8 向量: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 类型: 未认证 SQL注入 → 远程代码执行 受影响的软件: FreePBX endpoint 模块 参数 : 目标主机名或 IP 地址（存在漏洞的 FreePBX 实例） : 攻击者用于接收反向 Shell 回调的 IP 地址 : 监听传入连接的端口 示例： root@kitploit: python3 cve-2025-57819.py freepbx.local 10.10.16.38 9999 监听器设置...

Persistnux

Persistnux A comprehensive Linux persistence detection tool for Digital Forensics and Incident Response DFIR investigations. Overview Persistnux is a bash-based tool designed to identify known Linux persistence mechanisms used by attackers to maintain access to compromised systems. It performs...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...

CVE-2025-57819-POC

CVE-2025-57819 — FreePBX SQL 注入 → RCE PoC CVE-2025-57819 是 FreePBX 中的一个严重 SQL 注入漏洞，未认证的攻击者可通过将 SQL 注入与 cron 任务注入相结合来实现远程代码执行。 ⚠️ 免责声明 ：本仓库仅用于授权安全测试和教育目的。未经授权对你不拥有或未获得明确测试许可的系统使用此漏洞利用程序属于违法行为。作者不对任何滥用或损害负责。 漏洞概述 字段| 详情 ---|--- CVE| CVE-2025-57819 受影响产品| FreePBX（认证前） 漏洞类型| SQL 注入（堆叠查询） 影响| 远程代码执行 RC...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX：从无认证 SQL 注入到 Root Shell CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 执行摘要 本演练记录了 HTB 机器 Connected 的完整入侵过程。 攻击链始于 FreePBX 中的一个无认证 SQL 注入漏洞，该漏洞被利用通过精心构造的 cron 任务以 asterisk 用户身份获得代码执行权限。随后，一个可写的配置文件与 incron 触发器相结合，实现了向 root 的权限提升。 此案例展示了 Web 应用程序漏洞在结合本地权限配置薄弱和不安全的特权自动化时，如何导致系统被完全入侵。 ...

CVE-2021-32157

..| XSS to RCE CRON|.. 描述： 利用反射型跨站脚本（XSS）攻击，通过 Webmin 的计划 Cron 任务功能获取远程命令执行（RCE） 测试版本： Webmin 1.973（GitHub 最新版本 07/03/2021） 攻击类型： 远程 影响： 远程命令执行 漏洞利用代码 POC： 产品厂商： https://www.webmin.com 附加信息： "Webmin 是一款基于 Web 的系统管理工具，适用于类 Unix 服务器和服务，全球安装量超过 1,000,000。通过它，可以配置操作系统内部组件，如用户、磁盘配额、服务或配置文件，以及修改和控制开源应用...

CVE-2021-32156

..| CSRF a RCE CRON |.. Descripción : Explotando un ataque de Cross-site request forgery CSRF para obtener una Ejecución Remota de Comandos RCE a través de la función de Trabajos Cron Programados de Webmin Versión Probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de Ataque: Remoto...