30 matches found
CVE-2022-24989
creationtimestamp| type| source ---|---|--- 2023-06-13 19:50:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/terramasterunauthrcecve202224990.rb 2023-08-20 22:41:28+00:00| seen| https://t.me/cibsecurity/68865 2025-02-06 03:13:45+00:00| seen|...
TerraMaster TOS 4.2.29 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'digest/md5' require 'time' class MetasploitModule 'TerraMaster TOS 4.2.29 or lower - Unauthenticated RCE chaining CVE-2022-24990 and CVE-2022-24989',...
Terramaster TOS < 4.2.31 Multiple Information Disclosure Vulnerabilities - Active Check
Terramaster TOS is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
CVE-2023-24989
creationtimestamp| type| source ---|---|--- 2023-02-14 14:35:46+00:00| seen| https://t.me/cibsecurity/58076...
CVE-2023-24989
A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the...
CVE-2023-24989
CVE-2023-24989 affects Siemens/Technomatix Plant Simulation prior to V2201.0006. The issue is an out-of-bounds write past the end of an allocated buffer during parsing of SPP files, allowing code execution in the process context. Affected: Tecnomatix Plant Simulation; vulnerable component: SPP fi...
TerraMaster TOS 4.2.29 or lower - Unauthenticated RCE chaining CVE-2022-24990 and CVE-2022-24989
This module exploits an unauthenticated remote code execution vulnerability in TerraMaster TOS 4.2.29 and lower by chaining two existing vulnerabilities, CVE-2022-24990 "Leaking sensitive information" and CVE-2022-24989, "Authenticated remote code execution". Exploiting vulnerable endpoint...
CVE-2021-24989
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog...
CVE-2021-24989
Summary (CVE-2021-24989) : The WordPress plugin “Accept Donations with PayPal” is vulnerable in versions prior to 1.3.4 due to missing CSRF protection and inadequate verification that the target post belongs to the plugin. This enables a logged-in admin to delete arbitrary posts via a CSRF abuse ...
