MultiTech Conduit AEP — Authenticated Command Injection in `import_config` → Roo — Detect

Fingerprint / reachability check for MultiTech Conduit AEP — Authenticated Command Injection in importconfig → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for MultiTech Conduit AEP — Authenticated Command Injection in importconfig → Root RCE""" from kittysploit import from...

ObjectDB JDOQL Filter Injection to Root RCE

ObjectDB JDOQL Filter Injection to Root RCE """ObjectDB JDOQL Filter Injection to Root RCE""" from future import annotations from kittysploit import import os import socket import struct import subprocess import sys import tempfile import time import re import subprocess import tempfile import os...

Docmosis Tornado storeTo file write cron RCE

Anonymous POST /api/render with storeTo=file:/etc/cron.d/... writes a cron line as root when the service runs with elevated privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Docmosis Tornado unauthenticated storeTo=file arbitrary write → cron root RCE.""" from future import annotations...

IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository G — Detect

Fingerprint / reachability check for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import Path root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Raritan EMX — Authenticated Config Injection into port_mux proto_listener → Root — Detect

Fingerprint / reachability check for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE""" from kittysploit import from...

StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallback + Un-sandbox — Detect

Fingerprint / reachability check for StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallback + Un-sandboxed ScalaDTransform Code Execution → Anonymous Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallbac...

Edimax BR-6478AC setWAN command injection root RCE

HTTP Basic auth POST /goform/setWAN — pppUserName/pptpUserName/L2TPUserName injected into system pipeline as root boa User root. """Edimax BR-6478AC setWAN authenticated command injection root.""" from future import annotations import base64 from urllib.parse import urlencode from kittysploit...

ksqlDB unauthenticated CREATE SINK CONNECTOR cron root RCE

UNAUTH POST /ksql creates FileStreamSinkConnector writing /etc/cron.d/; produce cron line on Kafka topic 9092 for root execution. !/usr/bin/env python3 -- coding: utf-8 -- """Confluent ksqlDB unauthenticated FileStreamSinkConnector cron root RCE.""" from future import annotations import json impo...

Minuteman UPS NMC — Unauthenticated Command Injection in system_param.csp → Root — Detect

Fingerprint / reachability check for Minuteman UPS NMC — Unauthenticated Command Injection in systemparam.csp → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Minuteman UPS NMC — Unauthenticated Command Injection in systemparam.csp → Root RCE""" from kittysploit import from...

Loadbalancer.org ADC Deployment Template Command Injection to Root RCE — Detect

Fingerprint / reachability check for Loadbalancer.org ADC Deployment Template Command Injection to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Loadbalancer.org ADC Deployment Template Command Injection to Root RCE""" from kittysploit import from lib.protocols.http.httpclie...

OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE — Detect

Fingerprint / reachability check for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE""" from kittysploit import from...

HiveMQ Data Hub Zip-Slip custom module cron root RCE

Admin POST /api/v1/cc-data-hub/module-instances/custom with Zip-Slip archive writing /etc/cron.d/. !/usr/bin/env python3 -- coding: utf-8 -- """HiveMQ Platform Data Hub custom module Zip-Slip cron root RCE.""" from future import annotations import base64 import io import json import random import...

GeoVision SNMPv3 authKey injection root RCE

LAPI Digest admin: szAuthKey injected into net-snmp-config system sink classic '; cmd ; ' on TBL4700. """GeoVision GV-TBL4700 — SNMPv3 User Config → net-snmp-config Command Injection → Root RCE""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclien...

Cambium cnMatrix SSL CSR command injection root RCE

Authenticated admin session; COMMONNAME field injected as ";CMD;echo " executed during CSR generation. """Cambium cnMatrix SSL CSR COMMONNAME command injection root RCE.""" from future import annotations import re from urllib.parse import urlencode, unquote from kittysploit import from...

Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RC — Detect

Fingerprint / reachability check for Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RCE""" from kittysploit import from...

DrayTek Vigor uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE.""" from future import annotations import uuid from kittysploit import from...

Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE — Detect

Fingerprint / reachability check for Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE""" from kittysploit import from...

Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE — Detect

Fingerprint / reachability check for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE""" from kittysploit import from...

HiveMQ Platform Data Hub Zip-Slip to Root RCE — Detect

Fingerprint / reachability check for HiveMQ Platform Data Hub Zip-Slip to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for HiveMQ Platform Data Hub Zip-Slip to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...