7 matches found
Zeroshell kerbynet RCE (CVE-2019-12725)
Exploits CVE-2019-12725 in Zeroshell 3.9.0: newline injection in the User parameter of kerbynet StartSessionSubmit yields unauthenticated RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Zeroshell kerbynet command injection CVE-2019-12725.""" import re import urllib.parse from kittysploit import...
Zeroshell kerbynet RCE (CVE-2020-29390)
Exploits CVE-2020-29390 in Zeroshell 3.9.3: shell metacharacter injection via ampersand-wrapped commands in StartSessionSubmit User parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Zeroshell kerbynet ampersand injection CVE-2020-29390.""" import re import urllib.parse from kittysploit impo...
Zeroshell 3.9.3 - Command Injection Detection
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character. !/usr/bin/env python3 -- coding: utf-8 -- """Zeroshell 3."...
CVE-2020-29390
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...
CVE-2020-29390
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...
Command injection
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...
CVE-2020-29390: Improper Neutralization of Special Elements used in an OS Command
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...