{"uuid": "aec09103-d7d7-4013-ac32-4686679e31c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2611", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution (RCE) vulnerability\\n          in ICTBroadcast. The vulnerability exists in the way session cookies are handled\\n          and processed, allowing an attacker to inject arbitrary system commands.\", \"disclosure_date\": \"2025-03-19\", \"fullname\": \"exploit/linux/http/ictbroadcast_unauth_cookie\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"ICTBroadcast Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ictbroadcast_unauth_cookie\", \"references\": [\"URL-https://www.ictbroadcast.com/\", \"CVE-2025-2611\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.529661Z"}