CVE-2021-41277

CVE-2021-41277 برنامج بسيط لاستغلال Metabase تثبيت gem install httparty gem install colorize gem install timeout ruby CVE.rb...

Metabase - Local File Inclusion

Metabase is an open source data analytics platform. In affected versions a local file inclusion security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not...

Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase - Beliebige Dateien auslesen optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:pytho...

Metabase_Nmap_Script

MetabaseNmapScript È uno script nmap per la vulnerabilità di Metabase CVE-2021-41277 USO -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | State: VULNERABLE Exploitable -- | IDs:...

CVE-2021-41277

CVE-2021-41277 MetaBase Vulnerabilidade de leitura arbitrária de arquivos - poc em lote para fofa Declaração Este poc destina-se apenas à detecção da existência da vulnerabilidade no alvo. É estritamente proibido utilizá-lo para testes não autorizados. O autor não assume qualquer responsabilidade...

CVE-2021-41277

CVE-2021-41277 MetaBase मनमाना फ़ाइल पढ़ना व्यक्तिगत रूप से लिखी गई छोटी स्क्रिप्ट, अच्छी नहीं लिखी गई है, कृपया सुधारें घोषणा : प्रदान की गई तकनीक केवल सीखने, संदर्भ और परीक्षण के लिए है। इस लेख में दी गई जानकारी के उपयोग से होने वाले प्रत्यक्ष या अप्रत्यक्ष नुकसान की जिम्मेदारी उपयोगकर्ता स्वयं...

CVE-2021-41277

CVE-2021-41277 plugin realizzato per LeakiX...

PoC-Metabase-CVE-2021-41277

Questo repository non contiene un README...

CVE-2025-41277

creationtimestamp| type| source ---|---|--- 2026-05-29 13:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyme4jokh2e 2026-06-22 00:40:54+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnlwq4qf2m...

CVE-2025-41277

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...

CVE-2026-41277

creationtimestamp| type| source ---|---|--- 2026-04-15 21:44:26+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3prp-9gf7-4rxx 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM 2026-04-25 01:12:04+00:00| seen|...

CVE-2021-41277

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...

Metabase < 1.40.5

The version of Metabase installed on the remote host is prior to 1.40.5. It is, therefore, affected by a local file inclusion vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 Tenable,...

CVE-2023-41277

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...

Qnap QTS Classic Buffer Overflow (CVE-2023-41277)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

QNAP QTS / QuTS hero Multiple Vulnerabilities in QTS, QuTS hero (QSA-23-38)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-38 advisory: - A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could...

QNAP QTS Multiple Vulnerabilities (QSA-23-38)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

CVE-2023-41277

creationtimestamp| type| source ---|---|--- 2024-02-02 17:26:56+00:00| seen| https://t.me/ctinow/178174 2024-02-25 12:12:02+00:00| seen| https://t.me/ctinow/192850...

CVE-2023-41277

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...