Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE (storeTo=file: — Detect

Fingerprint / reachability check for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron""" from kittysploit import...

KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE — Detect

Fingerprint / reachability check for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection — Detect

Fingerprint / reachability check for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE""" from kittysplo...

Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect

Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...

GigaSpaces XAP Unauthenticated Path Traversal to Root RCE — Detect

Fingerprint / reachability check for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE — Detect

Fingerprint / reachability check for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE""" from kittysploit import from...

nanoDLP unauthenticated G-code injection RCE

Guest POST /formula evaluates JavaScript with nanodlpContext; ShieldUnpause is persisted via Config.Save, then GET /printer/unpause executes Exec cmd as root. !/usr/bin/env python3 -- coding: utf-8 -- """nanoDLP unauthenticated G-code injection RCE via /formula and /printer/unpause.""" from futur...

Biamp Devio DTP quote-injection root RCE

Plaintext biampdtp on 4030: DEVICE set password with ';cmd;' breaks echo -e 'biamp:VALUE' | chpasswd quoting. """Biamp Devio SCR-20/25 — Unauthenticated DTP Protocol Quote-Injection → Root RCE""" from future import annotations from kittysploit import import socket import sys import time import re...

mySCADA PRO Runtime unauthenticated upgrade command injection root RCE

POST /s.fcgi?upgrade= with X-File directory triggers systemchmod 777 /opt/myscada/fw/ as root. """mySCADA PRO Runtime unauthenticated /s.fcgi upgrade branch command injection.""" from future import annotations import re from urllib.parse import quote from kittysploit import from lib.exploit.handl...

ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE — Detect

Fingerprint / reachability check for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Royal Render unauth rrServer job submission RCE

TCP 7773 captured Execute/Once job record no auth. Scene script path embedded in record — write locally only if worker shares that storage. """Royal Render 9.1.26b - Default-Unauthenticated Job Submission on rrServer Port 7773 Reaching a Worker-Side Shell Script Execution as root CWE-306, CWE-118...

Lantronix EDS3000PR — Authenticated Command Injection in SSL `-passin pass:%s` → — Detect

Fingerprint / reachability check for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE""" from kittysploit impor...

KeyHelp Apache ErrorLog pipe directive root RCE

Authenticated admin injects apachehttpdirectives ErrorLog pipe; KeyHelp cron renders vhost and Apache reload runs command as root. !/usr/bin/env python3 -- coding: utf-8 -- """KeyHelp authenticated Apache ErrorLog pipe directive root RCE.""" from future import annotations import os import re impo...

Lightstreamer Server 7.4.8 (build 3506 ENTERPRISE) — Shipped Placeholder JMX/RMI Credentials plus MLet Remote Class Load

Lightstreamer Server 7.4.8 build 3506 ENTERPRISE — Shipped Placeholder JMX/RMI Credentials plus MLet Remote Class Loading Yield root RCE """Lightstreamer Server 7.4.8 build 3506 ENTERPRISE — Shipped Placeholder JMX/RMI Credentials plus MLet Remote Class Loading Yield root RCE""" from future impor...

Server Technology PRO3X Rack PDU - port_mux Listener Program Override to Root Co — Detect

Fingerprint / reachability check for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution""" from...

Lantronix EDS FsUnmount command injection

Authenticated POST /FsUnmount with newline/breakout in path reaches ltrxusbumount → /bin/sh -c root. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix EDS FsUnmount path parameter command injection.""" from future import annotations import re from urllib.parse import urlencode from kittysplo...

Lantronix SGX5150 FsBrowseClean command injection root RCE

Authenticated POST ajax=FsBrowseClean with path=x'\n breaks out of ltrxusbumount shell quoting. """Lantronix SGX5150 FsBrowseClean newline command injection root RCE.""" from future import annotations import base64 import re from urllib.parse import urlencode from kittysploit import from...

Cambium cnMatrix EX3024F — SSL CSR Command Injection (Root RCE) — Detect

Fingerprint / reachability check for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in th — Detect

Fingerprint / reachability check for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in the pwrstudio Event Engine Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injectio...

Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE — Detect

Fingerprint / reachability check for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE""" from kittysploit import from...