Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Confi — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Configuration Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the...

IceWarp Server Static Route External Filter UNC DLL Remote Code Execution — Detect

Fingerprint / reachability check for IceWarp Server Static Route External Filter UNC DLL Remote Code Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IceWarp Server Static Route External Filter UNC DLL Remote Code Execution""" from kittysploit import from...

ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integ — Detect

Fingerprint / reachability check for ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integrity Check, Reaching Root Command Execution and Full Overwrite of the Account Database CWE-494, CWE-345 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ProSoft RLX-IFH24...

RoboTask REST API Unauthenticated Remote Task Execution (CWE-306) — Detect

Fingerprint / reachability check for RoboTask REST API Unauthenticated Remote Task Execution CWE-306 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for RoboTask REST API Unauthenticated Remote Task Execution CWE-306""" from kittysploit import from lib.protocols.http.httpclient import...

SmartBear Collaborator Server 15.1.15101 - Path Traversal (Zip-Slip) in the DOOR — Detect

Fingerprint / reachability check for SmartBear Collaborator Server 15.1.15101 - Path Traversal Zip-Slip in the DOORS/Simulink Review-File Upload Leading to Groovy Server Page Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for SmartBear Collaborator Server 15.1.15101 - Pat...

Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect

Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...

TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reachi — Detect

Fingerprint / reachability check for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Serv...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

Asustor ADM 3.5.9 (AS602T) — Post-Authentication Command Injection in `music.cgi — Detect

Fingerprint / reachability check for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.cgi act=live → Command Execution in the CGI Process !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Asustor ADM 3.5.9 AS602T — Post-Authentication Command Injection in music.c...

Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archi — Detect

Fingerprint / reachability check for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archive Import Leading to Unauthenticated Root Code Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in...

Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in th — Detect

Fingerprint / reachability check for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in the pwrstudio Event Engine Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injectio...

Cisco CUCM Remote Code Execution Chain — Detect

Fingerprint / reachability check for Cisco CUCM Remote Code Execution Chain !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Cisco CUCM Remote Code Execution Chain""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem — Detect

Fingerprint / reachability check for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem !/usr/bin/env python3 -- coding: utf-8 -- """Detection for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem""" from kittysploit import from lib.protocols.http.httpclie...

Lightstreamer Server 7.4.8 — Unauthenticated JMX `jvmtiAgentLoad` Native Code Ex — Detect

Fingerprint / reachability check for Lightstreamer Server 7.4.8 — Unauthenticated JMX jvmtiAgentLoad Native Code Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lightstreamer Server 7.4.8 — Unauthenticated JMX jvmtiAgentLoad Native Code Execution""" from kittysploit import fr...

Server Technology PRO3X Rack PDU - port_mux Listener Program Override to Root Co — Detect

Fingerprint / reachability check for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution""" from...

Opengear NGCS PDU name command injection

Administrator POST /api/v2/pdus with injected pdu.name breaks out of ogpower -n quoting; io.popen runs attacker command as root. !/usr/bin/env python3 -- coding: utf-8 -- """Opengear NGCS PDU name field command injection authenticated root.""" from future import annotations import json import re...

Royal Render unauth rrServer job submission RCE

TCP 7773 captured Execute/Once job record no auth. Scene script path embedded in record — write locally only if worker shares that storage. """Royal Render 9.1.26b - Default-Unauthenticated Job Submission on rrServer Port 7773 Reaching a Worker-Side Shell Script Execution as root CWE-306, CWE-118...

CatDV empty admin password aaftoolPath RCE

Login as admin with factory empty password, override aaftoolPath, trigger AAF export optional sshkey to stage /tmp/evil.sh. """CatDV factory-default empty admin password → aaftoolPath root RCE.""" from future import annotations import base64 import json import os import re import subprocess from...

StreamSets Transformer auth none ScalaDTransform RCE

Unauthenticated /rest/v1 pipeline API: ScalaDTransform stage runs sh -c with attacker command http.authentication=none. """StreamSets Transformer auth none ScalaDTransform anonymous RCE.""" from future import annotations import json import time import uuid from kittysploit import from...

Edimax BR-6478AC setWAN command injection root RCE

HTTP Basic auth POST /goform/setWAN — pppUserName/pptpUserName/L2TPUserName injected into system pipeline as root boa User root. """Edimax BR-6478AC setWAN authenticated command injection root.""" from future import annotations import base64 from urllib.parse import urlencode from kittysploit...