The official exploit for rConfig 3.9.2 Post-auth Remote Code Execution CVE-2019-16663 - View it on GitHub