Cambium cnMatrix EX3024F — SSL CSR Command Injection (Root RCE) — Detect

Fingerprint / reachability check for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Cambium cnMatrix EX3024F — SSL CSR Command Injection Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Confi — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Configuration Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the...

IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository G — Detect

Fingerprint / reachability check for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import Path root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import...

KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE — Detect

Fingerprint / reachability check for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for KeyHelp Apache Custom Directive ErrorLog Pipe to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE — Detect

Fingerprint / reachability check for Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix EDS3000PR — Authenticated Command Injection in FsUnmount → Root RCE""" from kittysploit import from...

Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE — Detect

Fingerprint / reachability check for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix SGX5150 — Authenticated Command Injection in FsBrowseClean → Root RCE""" from kittysploit import from...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Minuteman UPS NMC — Unauthenticated Command Injection in system_param.csp → Root — Detect

Fingerprint / reachability check for Minuteman UPS NMC — Unauthenticated Command Injection in systemparam.csp → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Minuteman UPS NMC — Unauthenticated Command Injection in systemparam.csp → Root RCE""" from kittysploit import from...

MultiTech Conduit AEP — Authenticated Command Injection in `import_config` → Roo — Detect

Fingerprint / reachability check for MultiTech Conduit AEP — Authenticated Command Injection in importconfig → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for MultiTech Conduit AEP — Authenticated Command Injection in importconfig → Root RCE""" from kittysploit import from...

mySCADA PRO Runtime — Unauthenticated `upgrade` Branch Command Injection → Root — Detect

Fingerprint / reachability check for mySCADA PRO Runtime — Unauthenticated upgrade Branch Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for mySCADA PRO Runtime — Unauthenticated upgrade Branch Command Injection → Root RCE""" from kittysploit import from...

VitalPBX — Authenticated Root RCE via asterisk_cli → dialplan System() (Privileg — Detect

Fingerprint / reachability check for VitalPBX — Authenticated Root RCE via asteriskcli → dialplan System Privilege Escalation !/usr/bin/env python3 -- coding: utf-8 -- """Detection for VitalPBX — Authenticated Root RCE via asteriskcli → dialplan System Privilege Escalation""" from kittysploit...

Wavestore VMS venusd /simple/export Command Injection to Root RCE — Detect

Fingerprint / reachability check for Wavestore VMS venusd /simple/export Command Injection to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Wavestore VMS venusd /simple/export Command Injection to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Edimax BR-6478AC setWAN command injection root RCE

HTTP Basic auth POST /goform/setWAN — pppUserName/pptpUserName/L2TPUserName injected into system pipeline as root boa User root. """Edimax BR-6478AC setWAN authenticated command injection root.""" from future import annotations import base64 from urllib.parse import urlencode from kittysploit...

ZesleCP admin file write cron root RCE

Admin POST /file-manager/save-file writes /etc/cron.d/ as root; crond executes attacker command. !/usr/bin/env python3 -- coding: utf-8 -- """ZesleCP admin arbitrary file write to /etc/cron.d root RCE.""" from future import annotations import json import re import time from kittysploit import fro...

Cambium cnMatrix SSL CSR command injection root RCE

Authenticated admin session; COMMONNAME field injected as ";CMD;echo " executed during CSR generation. """Cambium cnMatrix SSL CSR COMMONNAME command injection root RCE.""" from future import annotations import re from urllib.parse import urlencode, unquote from kittysploit import from...

CatDV aaftoolPath authenticated root RCE

Login to CatDV web API, PUT server-config aaftoolPath, trigger AAF export. Place the script on the host via sshkey or pre-stage at aaftoolpath. """CatDV authenticated aaftoolPath override → AAF export root RCE.""" from future import annotations import base64 import json import os import re import...

CloudPanel rootDirectory nginx vhost injection RCE

Authenticated panel: poison site rootDirectory with injected nginx locations, anonymous PUT PHP under /tmp, FastCGI exec as root confirm via handler. """CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93""" from future import annotatio...

core-admin escape_param shell injection (bytecode sink)

Loads product security.pyc/command.pyc to craft shell metacharacters for configured sink templates local bytecode lab; use product UI/API on target. """core-admin — Systemic Shell Command Injection via Ineffective Quote Escaping → Authenticated Root RCE""" from future import annotations from...

KeyHelp Apache ErrorLog pipe directive root RCE

Authenticated admin injects apachehttpdirectives ErrorLog pipe; KeyHelp cron renders vhost and Apache reload runs command as root. !/usr/bin/env python3 -- coding: utf-8 -- """KeyHelp authenticated Apache ErrorLog pipe directive root RCE.""" from future import annotations import os import re impo...

MultiTech Conduit import_config filename command injection RCE

Authenticated POST /api/command/uploadconfig with malicious filename breaks out of importconfig shell quoting. """MultiTech Conduit AEP importconfig filename command injection root RCE.""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclient import...