Monitorix - Pipe Command Injection Detection (CVE-2013-7070)

Detects CVE-2013-7070/7071 by requesting /monitorix/|id| style paths. !/usr/bin/env python3 -- coding: utf-8 -- """Monitorix HTTP server pipe command injection CVE-2013-7070.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...