2017-12-29 23:29:00 2018-01-11 14:49:05

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.