Raritan EMX port_mux config injection root RCE

Login → download config → inject protolistenerhttp program=/bin/sh → upload → TCP connect triggers execv as root. """Raritan EMX authenticated portmux protolistener config injection root RCE.""" from future import annotations import re import socket import time import uuid from urllib.parse impor...

VitalPBX asterisk_cli System() root RCE

Authenticated admin POST index.php asteriskcli runCommand adds dialplan System extension and originates a call to run as root. !/usr/bin/env python3 -- coding: utf-8 -- """VitalPBX asteriskcli dialplan System root privilege escalation.""" from future import annotations import json import re impor...

Biamp Vocia MS-1 FTPS hardcoded cred root RCE

FTPS ftpsuser/ftpsuser → Bins/ upload filename injection or astmon replacement → mum executes as root. """Biamp Vocia MS-1 Unauthenticated Root RCE via Hardcoded FTPS Credentials""" from future import annotations from kittysploit import from ftplib import FTPTLS, errorperm, errortemp import io...

ObjectDB JDOQL Filter Injection to Root RCE

ObjectDB JDOQL Filter Injection to Root RCE """ObjectDB JDOQL Filter Injection to Root RCE""" from future import annotations from kittysploit import import os import socket import struct import subprocess import sys import tempfile import time import re import subprocess import tempfile import os...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect

Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manuf — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manufacturing-Test Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in...

IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository G — Detect

Fingerprint / reachability check for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import Path root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import...

Lantronix EDS3000PR — Authenticated Command Injection in SSL `-passin pass:%s` → — Detect

Fingerprint / reachability check for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE""" from kittysploit impor...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Loadbalancer.org ADC Deployment Template Command Injection to Root RCE — Detect

Fingerprint / reachability check for Loadbalancer.org ADC Deployment Template Command Injection to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Loadbalancer.org ADC Deployment Template Command Injection to Root RCE""" from kittysploit import from lib.protocols.http.httpclie...

mySCADA PRO Runtime — Unauthenticated `upgrade` Branch Command Injection → Root — Detect

Fingerprint / reachability check for mySCADA PRO Runtime — Unauthenticated upgrade Branch Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for mySCADA PRO Runtime — Unauthenticated upgrade Branch Command Injection → Root RCE""" from kittysploit import from...

nanoDLP Unauthenticated Root RCE via G-code Injection — Detect

Fingerprint / reachability check for nanoDLP Unauthenticated Root RCE via G-code Injection !/usr/bin/env python3 -- coding: utf-8 -- """Detection for nanoDLP Unauthenticated Root RCE via G-code Injection""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Opengear NGCS Firmware 25.11.8 — PDU `name` Command Injection (Authenticated Adm — Detect

Fingerprint / reachability check for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Opengear NGCS Firmware 25.11.8 — PDU name Command Injection Authenticated Administrator to Root R"""...

Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection — Detect

Fingerprint / reachability check for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE""" from kittysplo...

Raritan EMX — Authenticated Config Injection into port_mux proto_listener → Root — Detect

Fingerprint / reachability check for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE""" from kittysploit import from...

Server Technology PRO3X Rack PDU - port_mux Listener Program Override to Root Co — Detect

Fingerprint / reachability check for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution""" from...

StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE — Detect

Fingerprint / reachability check for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE""" from kittysploit import from...

Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE — Detect

Fingerprint / reachability check for Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE""" from kittysploit import from...

Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect

Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...