cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

BigAnt Server 5.6.06 - Improper Access Control Detection

BigAnt Server 5.6.06 is susceptible to improper access control. The software utililizes weak password hashes. An attacker can craft a password hash and thereby possibly possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf...

BigAnt Server v5.6.06 - Local File Inclusion Detection

BigAnt Server v5.6.06 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """BigAnt Server v5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BigAnt Server v5.6.06 - Local File Inclusion...

CVE-2022-23350

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-23349

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery CSRF...

CVE-2022-23352

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service DoS...

CVE-2022-23347

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...

CVE-2022-23348

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes...

CVE-2022-26281

BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue...

EUVD-2009-4626

Malware in sbrugna...

EUVD-2022-28427

Malicious code in bioql PyPI...

EUVD-2022-28428

Malicious code in bioql PyPI...

EUVD-2022-28429

Malicious code in bioql PyPI...

EUVD-2022-30842

Malicious code in bioql PyPI...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Bigantsoft Bigant_Server

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration B...

CVE-2025-0364

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

CVE-2025-0364

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

CVE-2025-0364

CVE-2025-0364 (BigAntSoft BigAnt Server) affects BigAntSoft BigAnt Server up to and including version 5.6.06. The vulnerability allows unauthenticated remote code execution via the default SaaS account registration, where an attacker can create an administrative user and then upload/execute arbit...

CVE-2025-0364 BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

CVE-2025-0364 BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...