kramer_VIAware RCE

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrarycode because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleExploit, Httpclient: info = 'name':...