46 matches found
CVE-2024-38293: Cross-Site Request Forgery (CSRF)
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...
ALCASAR Security Vulnerabilities
ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to remote code execution attacks...
PT-2024-27929 · Alcasar · Alcasar
Name of the Vulnerable Software and Affected Versions: ALCASAR versions prior to 3.6.1 Description: The issue allows for CSRF and remote code execution in the activity.php file. Recommendations: For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue...
CVE-2024-38295
CVE-2024-38295 affects ALCASAR prior to version 3.6.1 and enables remote code execution via the still_connected.php endpoint. The vulnerability is documented across multiple sources (NVD/CNNVD) with high to critical impact scores (CVSS v3.1: base scores up to 9.8, high/critical in different asses...
CVE-2024-38295: Undefined Security Weakness
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
CVE-2024-38294
ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...
CVE-2024-38294: Undefined Security Weakness
ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...
ALCASAR Security Vulnerabilities
ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to cross-site request forgery and remote code execution attacks...
ALCASAR 'index.php' Crafted HTTP Header RCE
The ALCASAR network access controller hosted on the remote web server is affected by a remote code execution vulnerability due to not properly sanitizing user-supplied input to the 'host' HTTP header passed to the 'index.php' script. A remote, unauthenticated attacker can exploit this issue to...
ALCASAR Detection
Binary data alcasardetect.nbin...
ALCASAR 2.8 Remote Root Code Execution Vulnerability
No description provided by source. !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8 Remote Root Code Execution Vulnerability Author: eF Date : 2014-02-10 db 88 ,ad8888ba, db ad88888ba db 88888888ba d88b 88 d8"' "8b d88b d8" "8b d88b 88 "8b d8'8b 88 d8' d8'8b Y8, d8'8b 88 ,8P d8' 8b 88 88 d8...
ALCASAR <= 2.8.1 - Remote Root Code Execution Vulnerability
No description provided by source. !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a fck. db 88...
ALCASAR index.php Crafted HTTP host Header Vulnerability
Added: 09/16/2014 BID: 69662 OSVDB: 111026 Background ALCASAR is a free Network Access Controller that allows network managers to restrict Internet service access to authenticated users. ALCASAR allows control and logging of all network activity by users and/or defined user groups. Problem ALCASA...
ALCASAR index.php Crafted HTTP host Header Vulnerability
Added: 09/16/2014 BID: 69662 OSVDB: 111026 Background ALCASAR is a free Network Access Controller that allows network managers to restrict Internet service access to authenticated users. ALCASAR allows control and logging of all network activity by users and/or defined user groups. Problem ALCASA...
ALCASAR index.php Crafted HTTP host Header Vulnerability
Added: 09/16/2014 BID: 69662 OSVDB: 111026 Background ALCASAR is a free Network Access Controller that allows network managers to restrict Internet service access to authenticated users. ALCASAR allows control and logging of all network activity by users and/or defined user groups. Problem ALCASA...
ALCASAR index.php Crafted HTTP host Header Vulnerability
Added: 09/16/2014 BID: 69662 OSVDB: 111026 Background ALCASAR is a free Network Access Controller that allows network managers to restrict Internet service access to authenticated users. ALCASAR allows control and logging of all network activity by users and/or defined user groups. Problem ALCASA...
ALCASAR <= 2.8.1 - Remote Root Code Execution Vulnerability
Exploit for php platform in category web applications !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a...
ALCASAR 2.8.1 - Remote Code Execution
ALCASAR 2.8.1 - Remote Code Execution !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a fck. db 88...
ALCASAR 2.8.1 Remote Root Code Execution
!/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a fck. db 88 ,ad8888ba, db ad88888ba db 88888888ba d88b...
ALCASAR 2.8.1 - Remote Code Execution
!/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a fck. db 88 ,ad8888ba, db ad88888ba db 88888888ba d88b...