32 matches found
CVE-2021-41277
CVE-2021-41277 programa simple para explotar metabase instalación gem install httparty gem install colorize gem install timeout ruby CVE.rb...
CVE-2021-41277
CVE-2021-41277 为LeakiX制作的插件...
PoC-Metabase-CVE-2021-41277
此存储库没有 README。...
Metabase_Nmap_Script
MetabaseNmapScript 这是一个用于 Metabase 漏洞（CVE-2021-41277）的 nmap 脚本 用法 -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | State: VULNERABLE 可利用 -- | IDs: CVE:CVE-2021-41277 -- | Metabase...
CVE-2021-41277
CVE-2021-41277 MetaBase 任意文件读取 个人写的小脚本，写的不好还请指正 声明 : 提供的技术仅供学习参考测试，利用本文提供的信息造成的直接或间接损失由使用者自行承担。...
Metabase-cve-2021-41277
Metabase-cve-2021-41277 Metabase 任意文件读取 optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:python3...
CVE-2021-41277
CVE-2021-41277 MetaBase 任意文件读取漏洞 fofa批量poc 声明 本poc仅用于检测目标是否存在漏洞，严禁用于任何非授权测试，作者不负任何责任。 使用说明 在fofa.txt中填入fofa普通会员账号的email和key，如果是高级会员或者企业会员的话，在python程序中修改对应的可查询数据量 直接运行即可...
Metabase - Local File Inclusion
Metabase is an open source data analytics platform. In affected versions a local file inclusion security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not...
CVE-2025-41277
creationtimestamp| type| source ---|---|--- 2026-05-29 13:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyme4jokh2e 2026-06-22 00:40:54+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnlwq4qf2m...
CVE-2025-41277
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...
CVE-2026-41277
creationtimestamp| type| source ---|---|--- 2026-04-15 21:44:26+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3prp-9gf7-4rxx 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM 2026-04-25 01:12:04+00:00| seen|...
CVE-2021-41277
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...
Metabase < 1.40.5
The version of Metabase installed on the remote host is prior to 1.40.5. It is, therefore, affected by a local file inclusion vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 Tenable,...
CVE-2023-41277
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...
Qnap QTS Classic Buffer Overflow (CVE-2023-41277)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...
QNAP QTS / QuTS hero Multiple Vulnerabilities in QTS, QuTS hero (QSA-23-38)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-38 advisory: - A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could...
QNAP QTS Multiple Vulnerabilities (QSA-23-38)
QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...
CVE-2023-41277
creationtimestamp| type| source ---|---|--- 2024-02-02 17:26:56+00:00| seen| https://t.me/ctinow/178174 2024-02-25 12:12:02+00:00| seen| https://t.me/ctinow/192850...
CVE-2023-41277
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...