nanoDLP unauthenticated G-code injection RCE

Guest POST /formula evaluates JavaScript with nanodlpContext; ShieldUnpause is persisted via Config.Save, then GET /printer/unpause executes Exec cmd as root. !/usr/bin/env python3 -- coding: utf-8 -- """nanoDLP unauthenticated G-code injection RCE via /formula and /printer/unpause.""" from futur...

nanoDLP Unauthenticated Root RCE via G-code Injection — Detect

Fingerprint / reachability check for nanoDLP Unauthenticated Root RCE via G-code Injection !/usr/bin/env python3 -- coding: utf-8 -- """Detection for nanoDLP Unauthenticated Root RCE via G-code Injection""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...