CVE-2024-41628

CVE-2024-41628 Redshift Cyber Security가 CVE-2024-41628 ClusterControl LFI 취약점을 악용하기 위해 개발한 간단한 익스플로잇 스크립트입니다. 이 취약점은 CMON API에 영향을 미치며, 특히 기본적으로 각각 포트 9500과 9501에 상주하는 RPC 및 RPC-TLS 사용자 인터페이스에 영향을 줍니다. ClusterControl은 일반적으로 root 권한으로 실행되므로, 모든 시스템 파일을 읽어낼 수 있습니다. 읽어낼 수 있는 파일 예시: /etc/shadow...

EUVD-2018-2886

Malware in sbrugna...

Exploit for CVE-2024-41628

CVE-2024-41628 Simple exploit script developed by Redshift Cy...

Severalnines ClusterControl Detection

Detection of Severalnines ClusterControl. The script sends a connection request to the server and attempts to detect Severalnines ClusterControl and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Severalnines ClusterControl Cross-Site Scripting Vulnerability

Severalnines ClusterControl is an open source database management system. The system can be used to deploy , manage , monitor and scale the database . A cross-site scripting vulnerability exists in versions prior to Severalnines ClusterControl 1.6.0-4699. A remote attacker can exploit this...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

Cross site scripting

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

CVE-2018-10817 affects Severalnines ClusterControl: a cross-site scripting (XSS) vulnerability in the web interface present in versions prior to 1.6.0-4699. Remote attackers could inject arbitrary scripts/HTML. Exploitation details and fixes beyond this are not specified in the provided documents...