codexlynx/CVE-2019-25024

Full exploit code for CVE-2019-25024 an unauthenticated command injection flaw in OpenRepeater.

Python

[CVE-2019-25024] OpenRepeater (ORP) / Unauthenticated Command Injection

Advisories:

MITRE CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25024
US NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-25024
Tenable: https://www.tenable.com/cve/CVE-2019-25024
VulDB: https://vuldb.com/?id.170172
Ubuntu: https://ubuntu.com/security/CVE-2019-25024
Debian: https://security-tracker.debian.org/tracker/CVE-2019-25024
Launchpad: https://launchpad.net/bugs/cve/CVE-2019-25024

Usage:

$ python exploit.py
Usage: exploit.py <scheme>://<address> <command>