Green Packet Router - ajax.cgi Command Injection

Exploits OS command injection in Green Packet /ajax.cgi tagipPing. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Green Packet router ajax.cgi RCE — opens execute session.""" import re from urllib.parse import quote from kittysploit import from...

Green Packet Router - ajax.cgi RCE Detection

Detects Green Packet OS command injection via /ajax.cgi?action=tagipPing&pip=127.0.0.1%26id%26. !/usr/bin/env python3 -- coding: utf-8 -- """Green Packet router ajax.cgi OS command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2018-14067

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

EUVD-2013-3515

Malware in sbrugna...

EUVD-2016-7473

Malware in sbrugna...

EUVD-2017-18889

Malware in sbrugna...

EUVD-2017-18842

Malware in sbrugna...

EUVD-2017-18841

Malware in sbrugna...

EUVD-2017-18840

Malware in sbrugna...

CVE-2013-3581

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...

CVE-2018-14067

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

Command injection

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

CVE-2018-14067

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

CVE-2018-14067

CVE-2018-14067 affects Green Packet WiMax DV-360 devices running 2.10.14-g1.0.6.1. The issue is a command injection vulnerability causing unauthenticated remote command execution when a crafted payload is sent to the HTTPS port. The underlying cause cited is that lighttpd listens on all network i...

CVE-2018-14067: Improper Neutralization of Special Elements used in a Command

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces including the external Internet by default. NOTE: this may overlap CVE-2017-9980...

Green Packet WiMax DV-360 Command Injection Vulnerability

The Green Packet WiMax DV-360 is a router for the home from Green Packet USA. A security vulnerability exists in the Green Packet WiMax DV-360 2.10.14-g1.0.6.1 that allows for command injection, unauthenticated remote command execution via crafted payloads to HTTPS ports, as lighttpd listens to a...

PT-2020-8532

Name of the Vulnerable Software and Affected Versions: Green Packet WiMax DV-360 version 2.10.14-g1.0.6.1 Description: The issue allows for Command Injection, enabling unauthenticated remote command execution. This can be achieved by sending a crafted payload to the HTTPS port. The problem arises...

Default credentials

Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device...

CVE-2016-6552

Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device...

CVE-2016-6552

CVE-2016-6552 affects Green Packet DX-350, which uses non-random default credentials (root:wimax). A remote attacker on the network can gain privileged access, with a critical CVSSv3 base score (9.8) and full impact on confidentiality, integrity, and availability. The documents corroborate a cred...