
Proof-of-concept exploit for CVE-2025-48703, an unauthenticated remote code execution vulnerability in CentOS Web Panel (CWP) versions prior to 0.9.8.1205, with an integrated Shodan-based target discovery module.
CVE-2025-48703 is a critical vulnerability in CentOS Web Panel (CWP) that allows unauthenticated attackers to perform remote code execution (RCE) by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patched in the latest version 0.9.8.1205.
shodan download --limit 206765 list-targets "Server: cwpsrv"
shodan parse --fields ip_str,port --separator , list-targets.json.gz > targets.txt
