19 matches found
CVE-2021-41277
CVE-2021-41277 为LeakiX制作的插件...
PoC-Metabase-CVE-2021-41277
此存储库没有 README。...
CVE-2021-41277
CVE-2021-41277 MetaBase 任意文件读取漏洞 fofa批量poc 声明 本poc仅用于检测目标是否存在漏洞，严禁用于任何非授权测试，作者不负任何责任。 使用说明 在fofa.txt中填入fofa普通会员账号的email和key，如果是高级会员或者企业会员的话，在python程序中修改对应的可查询数据量 直接运行即可...
CVE-2021-41277
CVE-2021-41277 利用 Metabase 的简单程序 安装 gem install httparty gem install colorize gem install timeout ruby CVE.rb...
Metabase - Local File Inclusion
Metabase is an open source data analytics platform. In affected versions a local file inclusion security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not...
Metabase_Nmap_Script
MetabaseNmapScript Es un script de nmap para la vulnerabilidad de Metabase CVE-2021-41277 USO -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | Estado: VULNERABLE Explotable -- | IDs:...
CVE-2021-41277
CVE-2021-41277 Lectura arbitraria de archivos en MetaBase Pequeño script escrito por mí, no está muy bien hecho, agradezco cualquier corrección Declaración : La tecnología proporcionada es solo para referencia y pruebas de aprendizaje. Las pérdidas directas o indirectas causadas por el uso de la...
Metabase-cve-2021-41277
Metabase-cve-2021-41277 Metabase 任意文件读取 optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:python3...
CVE-2021-41277
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...
Metabase LFI (CVE-2021-41277)
Binary data metabaselficve-2021-41277.nbin...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 MetaBase Arbitrary File Reading This is a...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 Metabase GeoJSON map local fil...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 MetaBase arbitrary file reading vulnerability,...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
Metabase-cve-2021-41277 Metabase 任意文件读取 optional arguments:...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 PoC Metabase is an open source data analytics...
CVE-2021-41277
creationtimestamp| type| source ---|---|--- 2021-11-17 22:20:55+00:00| seen| https://t.me/cibsecurity/32567 2021-11-21 13:37:04+00:00| seen| https://t.me/bhhub/640 2021-11-21 13:45:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4802 2021-11-22 13:37:04+00:00| seen|...
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...