102 matches found
Telewreck
Telewreck CVE-2017-9248에 취약한 Telerik Web UI 버전을 탐지하고 익스플로잇하는 Burp 확장 프로그램입니다. 이 확장 프로그램은 Paul Taylor@bao7uo가 작성한 원본 익스플로잇 도구https://github.com/bao7uo/dpcrypto를 기반으로 합니다. 그에게 감사와 큰 찬사를 보냅니다. Telerik Web UI를 통해 웹 애플리케이션을 익스플로잇하는 방법에 관한 관련 블로그 게시물은 여기에서도 찾을 수 있습니다. Features 수동 스캔 중에 취약한 Telerik Web ...
dp_crypto
dpcrypto Base64ベースの暗号化オラクルエクスプロイト（CVE-2017-9248、Telerik UI for ASP.NET AJAX ダイアログハンドラ対象） exploit-db に掲載 2020年更新 - exploit-db上のバージョンは、こちらのGitHub上の最新バージョンと比較してかなり古くなっていますのでご注意ください。 https://www.exploit-db.com/exploits/43873/ 関連情報 もう一つのTelerik...
dp_crypto
dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...
dp_cryptomg
dpcryptomg CVE-2017-9248을 익스플로잇하기 위한 또 다른 도구로, Telerik UI for ASP.NET AJAX 대화 상자 처리기의 암호학적 취약점입니다. 익스플로잇에 성공하면 임의 파일을 업로드할 수 있는 파일 관리자 기능에 접근하게 되어, 일반적으로 원격 코드 실행RCE으로 이어집니다. 이 취약점은 Telerik "DialogParameters"의 복호화 과정 중 오류 메시지를 통한 정보 누출로 인해 발생합니다. "DialogParameters"는 암호화된 구성 값들의 집합입니다. 이러한 값들은 사용자...
CVE-2017-9248
이 저장소에는 README가 없습니다...
telerik-scanner-cve-2017-9248
Telerik CVE-2017-9248 취약점 스캐너 V2.0 Telerik 엔드포인트를 발견하고 CVE-2017-9248 암호화 취약점을 테스트하는 포괄적인 Python 스캐너로, 엔터프라이즈급 대량 스캔 기능을 제공합니다. 기능 빠른 모드 & 검색 모드: 단일 경로 테스트 또는 포괄적인 검색 50개 이상의 경로 대량 스캔 : 파일에서 여러 대상을 자동으로 스캔 멀티스레드 : 빠른 동시 엔드포인트 열거 버전 감지 : 특정 Telerik 버전 식별 프록시 지원 : Burp Suite 및 기타 도구와 함께 사용 가능 CSV/JS...
CVE-2026-9248
creationtimestamp| type| source ---|---|--- 2026-05-22 16:54:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhfkht5tm2n...
CVE-2025-9248
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of the argument ssidhex results in...
CVE-2025-9248
CVE-2025-9248 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 firmware 1.0.013.001 through 1.2.07.001. Root cause is a stack-based overflow in the RP_pingGatewayByBBS function when processing the ssidhex argument in /goform/RP_pingGatewayByBBS, enabling remote exploitation. The exploit ...
CVE-2024-9248
creationtimestamp| type| source ---|---|--- 2024-09-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1302/...
plotaroute.com Cross Site Scripting vulnerability OBB-3658664
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
okashik.com Cross Site Scripting vulnerability OBB-3649394
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hifionline.cz Cross Site Scripting vulnerability OBB-3525780
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
rymerlake.lopressure.com Cross Site Scripting vulnerability OBB-3480077
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities
Today, CISA, the Federal Bureau of Investigation FBI, and Multi-State Information Sharing and Analysis Center MS-ISAC released an update for joint Cybersecurity Advisory CSA Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server. This iteration of the CSA—now renamed...
guster.com Cross Site Scripting vulnerability OBB-3302438
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
epeitaliana.it Cross Site Scripting vulnerability OBB-3289390
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cccj.jp Cross Site Scripting vulnerability OBB-3277268
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
heartandsoulacademy.de Cross Site Scripting vulnerability OBB-3262872
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
eb-patent.de Cross Site Scripting vulnerability OBB-3256699
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...