Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-46649 — ACEmanager PoC exploit | Kitploit
Tools/GitHubGitHub/karaflow/cve-2022-46649
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubkaraflow/cve-2022-46649

CVE-2022-46649

ACEmanager PoC exploit

View Repository
14 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-46649

PoC exploit for CVE-2022-46649, a command injection vulnerability in the /cgi-bin/iplogging.cgi endpoint.

The vulnerability allows authenticated attackers to execute arbitrary OS commands via crafted tcpdumpParams.

Overview

  • Vulnerability: OS Command Injection
  • Endpoint: /admin/tools/iplogging.cgi
  • Vector: tcpdumpParams parameter
  • Auth Required: Yes
  • Impact: Remote command execution

How It Works

  • Authenticate via /xml/Connect.xml
  • Maintain session using cookies
  • Send malicious payload to iplogging.cgi
  • Inject command via -z option in tcpdumpParams

Usage

root@kitploit:~
python3 exploit.py <host> <port> <username> <password> <command>

Example

root@kitploit:~
python3 exploit.py 192.168.13.1 9443 admin admin "reboot"

Notes

  • SSL verification is disabled (verify=False)
  • Target must be reachable over HTTPS
  • Valid credentials are required
Download Tool