46 matches found
ALCASAR Host Header RCE
Exploits ALCASAR command injection via a crafted Host header on /alcasar/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host header command injection RCE — execute session.""" from future import annotations import re from kittysploit import...
ALCASAR - Host Header RCE Detection
Detects ALCASAR RCE by injecting mailto:...;id; into the Host header on /alcasar/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host-header command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...
EUVD-2024-37251
Malicious code in bioql PyPI...
EUVD-2024-37252
Malicious code in bioql PyPI...
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
CVE-2024-38294
ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
CVE-2024-38295
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
CVE-2024-38295
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
PT-2024-27930 · Alcasar · Alcasar
Name of the Vulnerable Software and Affected Versions: ALCASAR versions prior to 3.6.1 Description: The issue allows remote code execution in the email registration back.php file. Recommendations: For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue...
CVE-2024-38294
ALCASAR before 3.6.1 contains a remote code execution vulnerability via the file email_registration_back.php. Affected product: Alcasar versions prior to 3.6.1. Impact is described as high/total in the CVE, with no exploit specifics provided in the supplied documents. Root cause details are not d...
CVE-2024-38294
ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...
ALCASAR Security Vulnerabilities
ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to remote code execution attacks...
ALCASAR Security Vulnerabilities
ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to cross-site request forgery and remote code execution attacks...
CVE-2024-38295
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
CVE-2024-38293
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
CVE-2024-38295
CVE-2024-38295 affects ALCASAR prior to version 3.6.1 and enables remote code execution via the still_connected.php endpoint. The vulnerability is documented across multiple sources (NVD/CNNVD) with high to critical impact scores (CVSS v3.1: base scores up to 9.8, high/critical in different asses...