17 matches found
CVE-2012-2982
此存储库没有 README。...
CVE-2012-2982
此存储库没有 README。...
CVE-2012-2982-Python-PoC
CVE-2012-2982-Python-PoC 这是一个从metasploit模块转换而来的PoC,作为OSCP学习的练习。最初是因为在TryHackMe的Gamezone机器上找不到可手动使用的公开漏洞利用而感到沮丧。我分析了metasploit代码并将其转换为Python。 证明截图显示用户agent47:...
CVE-2012-2982
此存储库没有 README。...
CVE-2012-2982_Python
CVE-2012-2982Python PoC Python脚本,来自tryhackme的练习:https://tryhackme.com/room/intropocscripting 这是对应的Metasploit CVE:https://www.exploit-db.com/exploits/21851 以下是发现该漏洞后所做的更改:https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213 如何使用: 克隆仓库,然后查看脚本以了解需要修改的地方。...
CVE-2012-2982
CVE-2012-2982 也称为 /file/show.cgi 远程命令执行 一个简单的 CVE-2012-2982 poc...
CVE-2012-2982
CVE-2012-2982 针对CVE-2012-2982(Webmin 1.580)的Python POC,由用户 OstojaOfficial 在原版基础上改进。 这是原始脚本的改进版本,用户无需查看整个脚本即可了解输入数据的格式。为此,只需将该部分代码移至开头: 同时,添加了一个退出指令以防止脚本继续运行(sys.exit1)。 还增加了用户可以在调用漏洞利用工具时指定Webmin 1.580服务运行端口的功能。 由于添加了一个新的输入项,所有其他数据也随之调整,同时修改了用于登录和利用漏洞的查询URL。 最后,添加了主功能,当所有数据正确接收时脚本将执行该功能。...
CVE-2012-2982
CVE 2012-2982 EXPLOTACIÓN Construcción mvn clean install Explotación java -jar ./target/CVE-2012-2982-1.0-SNAPSHOT-jar-with-dependencies.jar...
Webmin show.cgi Command Execution (CVE-2012-2982)
A command execution vulnerability has been reported in Webmin...
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...
FreeBSD Ports: webmin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...
CVE-2012-2982
creationtimestamp| type| source ---|---|--- 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21851 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/webminshowcgiexec.rb 2025-02-06 03:13:40+00:00| seen...
Webmin /file/show.cgi Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Webmin /file/show.cgi Remote Command...
CVE-2012-2982
CVE-2012-2982 is a Webmin vulnerability affecting 1.590 and earlier in /file/show.cgi that allows an authenticated user to execute arbitrary commands via an invalid pathname (notably with a pipe). Public details include exploit modules and multiple advisories; remediation is upgrading Webmin to a...
Webmin contains input validation vulnerabilities
Overview Webmin 1.580, and possibly earlier versions, has been reported to contain input validation vulnerabilities. Description The advisories from American Information Security Group report the following vulnerabilities.CWE-20: Improper Input Validation - CVE-2012-2981 "An input validation flaw...