Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Ir a la página de inicio de sesión 2. Registrar una nueva cuenta, establecer la contraseña como P@$$w0rd!1234 3. Ejecutar el script -u = Correo electrónico de usuario con bajos privilegios Sin 2fa -a = Correo electrónico del administrador -t = URL Ej:...

CVE-2021-22911-rust

CVE-2021-22911 关于此CVE的Rust概念验证。用作 https://tryhackme.com/room/rocket 的一部分，这是一个在TryHackMe学习平台上的CTF从启动到root的挑战。 使用前，更新main.rs中的常量并运行，它应该可以直接工作。要求您拥有管理员电子邮件地址和用户名，并且未启用MFA。 基于 https://www.exploit-db.com/exploits/49960，一个依赖于启用MFA的Python实现（并且对于此版本的RocketChat无法直接使用）。...

CVE-2021-22911

CVE-2021-22911 Modifed ver of the original exploit to save some times on password reseting for unprivileged user The script assumes that you can register the account or already know credentials of unprivileged users. Change the password to the valid password on line: 63,73,96. Original exploit:...

Rocket.Chat <=3.13 - NoSQL Injection

Rocket.Chat 3.11, 3.12 and 3.13 contains a NoSQL injection vulnerability which allows unauthenticated access to an API endpoint. An attacker can possibly obtain sensitive information from a database, modify data, and/or execute unauthorized administrative operations in the context of the affected...

rocketcat-cve-2021-22911-exploit

Exploit de Rocket.Chat CVE-2021-22911 ⚠️ DESCARGO DE RESPONSABILIDAD - SOLO USO EDUCATIVO Este exploit es solo para pruebas de penetración autorizadas y fines educativos. El acceso no autorizado a sistemas informáticos es ilegal. El autor no se hace responsable de ningún uso indebido. 📋 Resumen...

CVE-2021-22911

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE...

Exploit for Special Element Injection in Rocket.Chat

CVE-2021-22911 If you have already registered...

Exploit for Special Element Injection in Rocket.Chat

CVE-2021-22911 Modifed ver of the original exploit to save som...

Rocket.Chat NoSQL injection (CVE-2021-22911)

A NoSQL injection vulnerability exists in Rocket.Chat. Successful exploitation of this vulnerability could allow attackers to inject commands and execute arbitrary code on the affected system...

Exploit for Special Element Injection in Rocket.Chat

Rocket.Chat Automated Unauthenticated Account Takeover to RCE...

Rocket.Chat 3.12.1远程代码执行（CVE-2021-22911）

Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated 2 Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 2 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat Info : This is a...

Rocket.Chat 3.12.1 NoSQL Injection / Code Execution

Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated 2 Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 2 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat Info : This is a...

Rocket.Chat 3.12.1 NoSQL Injection / Code Execution

Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated Author: enox Date: 06-06-2021 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat !/usr/bin/python...

Rocket.Chat 3.12.1 - NoSQL Injection to Remote Code Execution (Unauthenticated) Exploit

Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated Author: enox Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 3.12.1 CVE: CVE-2021-22911 Credits: https://blog.sonarsource.com/nosql-injections-in-rocket-chat !/usr/bin/python import requests impo...

CVE-2021-22911

creationtimestamp| type| source ---|---|--- 2021-06-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49960 2021-06-07 15:45:27+00:00| published-proof-of-concept| Telegram/tCqBhGf-ONTgPl1jNxk7jSK9BW7FRzVpc1tCk80-PQdj1g 2021-07-07 00:00:00+00:00| exploited|...

Exploit for Special Element Injection in Rocket.Chat

CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remot...

CVE-2021-22911

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE...

CVE-2021-22911

CVE-2021-22911 affects Rocket.Chat 3.11–3.13 and is a NoSQL injection that enables unauthenticated access to an API endpoint, potentially leading to data exposure, modification, or remote code execution. Root cause: NoSQL injection in endpoints such as getPasswordPolicy and users.list, enabling r...