reverse aws sqs command

AWS SQS command executor listener - execute commands via SQS without interactive shell !/usr/bin/env python3 -- coding: utf-8 -- """ AWS SQS Command Executor Listener Author: KittySploit Team Version: 1.0.0 This listener uses AWS SQS to execute commands remotely without an interactive shell. It's...

D-Link DIR-882 Sub Process Command Execution

The vulnerability of the sub432F60 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

phpPgAdmin Data Export Command Execution

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

TOTOLINK A720R Router Sub 402414 Function Command Execution

The vulnerability of the sub402414 function in TOTOLINK A720R router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker, operating remotely, to execute arbitrary commands...

TOTOLINK A720R Router Sub 40BFA4 Function Command Execution

The vulnerability of the sub40BFA4 function in TOTOLINK A720R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

phpPgAdmin Display Command Execution

The vulnerability of the display.php script in the phpPgAdmin web administration tool for PostgreSQL databases is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

D-Link DIR-882 Sub Process Command Execution

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-1260 Router Arbitrary Command Execution

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

jhttpd Sub_4621DC Arbitrary Command Execution

The vulnerability of the sub4621DC function in the usbpaswd.asp file of the jhttpd component of D-Link routers such as DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003, and DI-8003G is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an...

D-link DIR-878A1 Router Arbitrary Command Execution

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-882 Subroutine Arbitrary Command Execution

The vulnerability of the sub433188 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-39148: Improper Control of Generation of Code

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

D-link DIR-823G Router Command Execution

The vulnerability of the /var/system/linuxvlanreinit file in the microprogramming-based routing software of D-link DIR-823G routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

EDIMAX BR-6478AC Arbitrary Command Execution

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-64127

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely...

Tenda AC21 Router httpd-demon SetIpMacBind Command Execution DoS

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Zenitel TCIV-3+ IP video door phones Command Injection

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

📄 Cisco ISE API 3.0 Command Injection

Proof of concept exploit for a command injection vulnerability in Cisco ISE API version 3.0. ============================================================================================================================================= | Title : Cisco ISE API 3.0 command injection Exploits | |...

httpd-demon Arbitrary Command Execution

The vulnerability of the httpd-demon /goform/SetSysTimeCfg in the Tenda AC21 router microprogramming system is related to the operation of writing data beyond the buffer in memory when processing parameters for time and timeZone. Exploiting this vulnerability allows a remote attacker to execute...