18 matches found
CVE-2021-22911
CVE-2021-22911 Изменённая версия оригинального эксплойта для экономии времени на сбросе пароля для непривилегированного пользователя Скрипт предполагает, что вы можете зарегистрировать учётную запись или уже знаете учётные данные непривилегированных пользователей. Измените пароль на действительны...
Rocket.Chat <=3.13 - NoSQL Injection
Rocket.Chat 3.11, 3.12 and 3.13 contains a NoSQL injection vulnerability which allows unauthenticated access to an API endpoint. An attacker can possibly obtain sensitive information from a database, modify data, and/or execute unauthorized administrative operations in the context of the affected...
Rocket-Chat-3.12.1-PoC-CVE-2021-22911-
Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Перейдите на страницу входа 2. Зарегистрируйте новый аккаунт, установите пароль P@$$w0rd!1234 3. Запустите скрипт -u = email пользователя с низкими привилегиями без 2FA -a = email администратора -t = URL Например: http://rocketchat.local python3...
CVE-2021-22911-rust
CVE-2021-22911 이 CVE에 대한 Rust로 작성된 개념 증명PoC입니다. TryHackMe 학습 플랫폼의 CTF 부트 투 룻boot to root인 https://tryhackme.com/room/rocket의 일부로 사용됩니다. 사용하려면 main.rs의 상수를 업데이트하고 실행하면 바로 작동합니다. 관리자 이메일 주소와 사용자 이름이 필요하며, MFA가 활성화되어 있지 않아야 합니다. https://www.exploit-db.com/exploits/49960 기반, MFA가 활성화되어 있어야 하는 Python...
rocketcat-cve-2021-22911-exploit
Rocket.Chat CVE-2021-22911 Exploit ⚠️ DISCLAIMER - ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЕЙ Этот эксплойт предназначен только для авторизованного тестирования на проникновение и образовательных целей. Несанкционированный доступ к компьютерным системам является незаконным. Автор не несет ответственности за...
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE...
Exploit for Special Element Injection in Rocket.Chat
CVE-2021-22911 If you have already registered...
Exploit for Special Element Injection in Rocket.Chat
CVE-2021-22911 Modifed ver of the original exploit to save som...
Rocket.Chat NoSQL injection (CVE-2021-22911)
A NoSQL injection vulnerability exists in Rocket.Chat. Successful exploitation of this vulnerability could allow attackers to inject commands and execute arbitrary code on the affected system...
Exploit for Special Element Injection in Rocket.Chat
Rocket.Chat Automated Unauthenticated Account Takeover to RCE...
Rocket.Chat 3.12.1远程代码执行（CVE-2021-22911）
Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated 2 Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 2 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat Info : This is a...
Rocket.Chat 3.12.1 NoSQL Injection / Code Execution
Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated 2 Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 2 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat Info : This is a...
Rocket.Chat 3.12.1 NoSQL Injection / Code Execution
Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat !/usr/bin/python...
CVE-2021-22911
creationtimestamp| type| source ---|---|--- 2021-06-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49960 2021-06-07 15:45:27+00:00| published-proof-of-concept| Telegram/tCqBhGf-ONTgPl1jNxk7jSK9BW7FRzVpc1tCk80-PQdj1g 2021-07-07 00:00:00+00:00| exploited|...
Rocket.Chat 3.12.1 - NoSQL Injection to Remote Code Execution (Unauthenticated) Exploit
Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated Author: enox Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat !/usr/bin/python import requests impo...
Exploit for Special Element Injection in Rocket.Chat
CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remot...
CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE...
CVE-2021-22911
CVE-2021-22911 affects Rocket.Chat 3.11–3.13 and is a NoSQL injection that enables unauthenticated access to an API endpoint, potentially leading to data exposure, modification, or remote code execution. Root cause: NoSQL injection in endpoints such as getPasswordPolicy and users.list, enabling r...