CVE-2014-62771

This exploit leverages the Shellshock vulnerability (CVE-2014-6271) in Bash to bypass PHP's disable_functions by injecting malicious environment variables via the mail() function. It executes arbitrary commands and returns the output to the attacker.

This is a detailed technical analysis of multiple vulnerabilities in Kemp Load Master, including RCE via command injection in CGI scripts, CSRF, XSS, and DoS. The writeup provides specific attack vectors, affected parameters, and code execution examples.

This Metasploit module exploits the Shellshock vulnerability (CVE-2014-6271) in Pure-FTPd by injecting malicious environment variables via FTP authentication. It leverages the bash environment variable code injection flaw to achieve remote command execution.

This exploit leverages the Shellshock vulnerability (CVE-2014-6271) in Bash to execute arbitrary commands via SMTP headers. It sends a crafted email with malicious headers to a vulnerable SMTP server, triggering command execution.

This exploit leverages the ShellShock vulnerability (CVE-2014-6271) in OpenVPN by injecting malicious environment variables via the username and password fields during authentication. The payload triggers a reverse shell to the attacker's machine.

This exploit leverages the Shellshock vulnerability (CVE-2014-6277) in Bash by crafting malicious DHCP packets. It listens for DHCP DISCOVER broadcasts, extracts client details, and responds with malicious OFFER/ACK packets containing a payload that triggers RCE via environment variable injection.

This is a technical writeup explaining the Bash Shellshock vulnerability (CVE-2014-6271), detailing how specially crafted environment variables can inject and execute arbitrary code. It includes examples of vulnerable and patched behavior, demonstrating the root cause and fix.

This Metasploit module exploits CVE-2014-6271 and CVE-2014-6278 (Shellshock) by injecting malicious environment variables into CUPS printer configurations, leading to remote code execution when a test page is printed.

This PHP script exploits CVE-2014-6271 (Shellshock) by sending a crafted HTTP request with a malicious User-Agent header to a vulnerable CGI script, triggering remote code execution via Bash environment variable injection.

This Metasploit module exploits CVE-2014-6271 (ShellShock) in QNAP Turbo NAS devices by injecting malicious environment variables via the User-Agent header to achieve remote code execution. It sends a crafted HTTP request to a CGI script, leveraging the Bash vulnerability to execute arbitrary commands.

This Metasploit module exploits CVE-2014-6271 (ShellShock) in QNAP Turbo NAS devices by injecting a malicious Bash environment variable via HTTP User-Agent header to spawn a utelnetd backdoor service, enabling remote command execution.

This exploit leverages ShellShock (CVE-2014-6271) to perform authenticated remote command injection on IPFire <= 2.15 core 82 via crafted HTTP headers. It uses Basic Auth and a malicious 'VULN' header to inject commands into the Bash environment.

This Metasploit module exploits CVE-2014-6271 (Shellshock) by sending a maliciously crafted HTTP request to a vulnerable CGI script, injecting a bash command that writes and executes a payload. It targets Linux x86 systems via Apache CGI.

This Metasploit module exploits CVE-2014-6271 (Shellshock) by sending a maliciously crafted HTTP User-Agent header to a BASH-based CGI script, allowing arbitrary command execution. The exploit leverages the vulnerability in BASH's environment variable parsing to inject and execute commands.