Server Technology PRO3X Rack PDU - port_mux Listener Program Override to Root Co — Detect

Fingerprint / reachability check for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Server Technology PRO3X Rack PDU - portmux Listener Program Override to Root Command Execution""" from...

StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE — Detect

Fingerprint / reachability check for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE""" from kittysploit import from...

Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE — Detect

Fingerprint / reachability check for Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Apache Struts 2 RestfulActionMapper OGNL Injection Unauthenticated Root RCE""" from kittysploit import from...

Wavestore VMS venusd /simple/export Command Injection to Root RCE — Detect

Fingerprint / reachability check for Wavestore VMS venusd /simple/export Command Injection to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Wavestore VMS venusd /simple/export Command Injection to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in th — Detect

Fingerprint / reachability check for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injection in the pwrstudio Event Engine Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Circutor LineEds 24.11.14 — Unauthenticated shellExecute Command Injectio...

GigaSpaces XAP Unauthenticated Path Traversal to Root RCE — Detect

Fingerprint / reachability check for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

HiveMQ Platform Data Hub Zip-Slip to Root RCE — Detect

Fingerprint / reachability check for HiveMQ Platform Data Hub Zip-Slip to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for HiveMQ Platform Data Hub Zip-Slip to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE — Detect

Fingerprint / reachability check for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integ — Detect

Fingerprint / reachability check for ProSoft RLX-IFH24E v2.2.44 - Firmware Upgrade Package Executed Without Any Integrity Check, Reaching Root Command Execution and Full Overwrite of the Account Database CWE-494, CWE-345 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ProSoft RLX-IFH24...

OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE — Detect

Fingerprint / reachability check for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE""" from kittysploit import from...

VitalPBX — Authenticated Root RCE via asterisk_cli → dialplan System() (Privileg — Detect

Fingerprint / reachability check for VitalPBX — Authenticated Root RCE via asteriskcli → dialplan System Privilege Escalation !/usr/bin/env python3 -- coding: utf-8 -- """Detection for VitalPBX — Authenticated Root RCE via asteriskcli → dialplan System Privilege Escalation""" from kittysploit...

Voicent Call Center SaveFileServlet Unauthenticated Root RCE — Detect

Fingerprint / reachability check for Voicent Call Center SaveFileServlet Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Voicent Call Center SaveFileServlet Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Wyn Enterprise Unauthenticated Root RCE (Token Forgery + Zip-Slip + Provider Loa — Detect

Fingerprint / reachability check for Wyn Enterprise Unauthenticated Root RCE Token Forgery + Zip-Slip + Provider Load !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Wyn Enterprise Unauthenticated Root RCE Token Forgery + Zip-Slip + Provider Load""" from kittysploit import from...

DrayTek Vigor uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE.""" from future import annotations import uuid from kittysploit import from...

TRENDnet TV-IP302PI NTP address command injection RCE

Authenticated CGI/ONVIF SetNTP: msntp -r sink with semicolon/command substitution in NtpIP / hostname field. """TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78""" from future import annotations from types...

Cambium cnMatrix SSL CSR command injection root RCE

Authenticated admin session; COMMONNAME field injected as ";CMD;echo " executed during CSR generation. """Cambium cnMatrix SSL CSR COMMONNAME command injection root RCE.""" from future import annotations import re from urllib.parse import urlencode, unquote from kittysploit import from...

CatDV aaftoolPath authenticated root RCE

Login to CatDV web API, PUT server-config aaftoolPath, trigger AAF export. Place the script on the host via sshkey or pre-stage at aaftoolpath. """CatDV authenticated aaftoolPath override → AAF export root RCE.""" from future import annotations import base64 import json import os import re import...

CloudPanel rootDirectory nginx vhost injection RCE

Authenticated panel: poison site rootDirectory with injected nginx locations, anonymous PUT PHP under /tmp, FastCGI exec as root confirm via handler. """CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93""" from future import annotatio...

core-admin escape_param shell injection (bytecode sink)

Loads product security.pyc/command.pyc to craft shell metacharacters for configured sink templates local bytecode lab; use product UI/API on target. """core-admin — Systemic Shell Command Injection via Ineffective Quote Escaping → Authenticated Root RCE""" from future import annotations from...

DrayTek Vigor 2960 uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE multi platform.""" from future import annotations import uuid from kittysploit import...