9 matches found
OpenTSDB 2.4.1 Unauthenticated Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenTSDB 2.4.1 unauthenticated command injection', 'Description' = %q This module exploits an unauthenticated command injection vulnerability in...
Exploit for OS Command Injection in Opentsdb
opentsdbkeycmdinjection An exploit for OpenTSDB -l -p -...
CVE-2023-36812
creationtimestamp| type| source ---|---|--- 2023-07-04 12:53:30+00:00| published-proof-of-concept| https://t.me/hunter4good/196 2023-09-07 14:30:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5101 2023-09-08 16:06:04+00:00| seen|...
OpenTSDB 2.4.1 unauthenticated command injection
This module exploits an unauthenticated command injection vulnerability in the key parameter in OpenTSDB through 2.4.1 CVE-2023-36812/CVE-2023-25826 in order to achieve unauthenticated remote code execution as the root user. The module first attempts to obtain the OpenTSDB version via the api. If...
CVE-2021-36812
CVE-2021-36812 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
PT-2022-10556
Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...