{"vulnerability": "cve-2017-9757", "sightings": [{"uuid": "b20d8a24-56fe-411f-aa96-1ac124656108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "8fd06d2a-0b43-4d93-b0f6-76722eb9db2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "1c35147b-766c-4e41-beec-28e27aac9ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_oinkcode_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "94ce4b67-91ed-48a2-b856-79cad1e1784f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IPFire_2.19_RCE_Authenticated\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joaoaugustom\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 01:05:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T02:00:03.907816Z"}, {"uuid": "50f407c9-c755-4590-91d8-e260ee38d011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "published-proof-of-concept", "source": "Telegram/_6WiR0p1XSX2Nc0kJrGm37A_Y4R5JUMfMftgMiyMuKNyYsM", "content": "", "creation_timestamp": "2026-08-09T00:33:41.801083Z"}, {"uuid": "21109f96-b181-49ca-932f-25479dc35763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IPFire_2.19_RCE_Authenticated\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joaoaugustom\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 01:05:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:53:16.612427Z"}, {"uuid": "efd370a9-c6ee-402b-a1ee-a7a7b46f93d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_oinkcode_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die \", \"0x09AL\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"IPFire, a free linux based open source firewall distribution,\\n          version < 2.19 Update Core 110 contains a remote command execution\\n          vulnerability in the ids.cgi page in the OINKCODE field.\", \"disclosure_date\": \"2017-06-09\", \"fullname\": \"exploit/linux/http/ipfire_oinkcode_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"IPFire proxy.cgi RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/ipfire_oinkcode_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/ipfire_oinkcode_exec\", \"references\": [\"CVE-2017-9757\", \"EDB-42149\"], \"rport\": 444, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:39.251329Z"}]}