191 matches found
CVE-2023-37649
CVE-2023-37649 affects Cockpit CMS v2.5.2, with an improper access control vulnerability in the component /models/Content that allows unauthorized attackers to access sensitive data. The associated CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). Multiple ...
CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data...
CVE-2023-37649: Undefined Security Weakness
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data...
CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data...
CVE-2023-37650
A Cross-Site Request Forgery CSRF in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands...
CVE-2023-37650
A Cross-Site Request Forgery CSRF in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands...
CVE-2023-37650
CVE-2023-37650 is a CSRF vulnerability in the Cockpit CMS Admin portal for version 2.5.2, allowing an attacker to execute arbitrary administrator commands. The CVE description and multiple connected reports (Red Hat, Veracode, GHSA) consistently describe CSRF arising in the Admin portal; some sou...
CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data...
PT-2023-26060 · Unknown · Cockpit Cms
Name of the Vulnerable Software and Affected Versions: Cockpit CMS version 2.5.2 Description: A Cross-Site Request Forgery CSRF in the Admin portal allows attackers to execute arbitrary Administrator commands. Recommendations: For Cockpit CMS version 2.5.2, consider disabling access to the Admin...
CVE-2023-37650: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands...
CVE-2021-32857 Cockpit vulnerable to Cross-site Scripting
Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in htmleditor.js may lead to cross-site scripting XSS issues. There are no known patches for this issue...
Privilege Escalation in the Cockpit CMS
Description Hi, during my analyses I realized that it is possible to perform a privilege escalation by intercepting the request and changing the roles from "user" to "admin" becoming the application's administrator. Proof of Concept poc:...
Cockpit CMS 0.11.1 NoSQL Injection
Exploit Title: Cockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection Date: 06-08-2021 Exploit Author: Brian Ombongi Vendor Homepage: https://getcockpit.com/ Version: Cockpit 0.11.1 Tested on: Ubuntu 16.04.7 CVE : CVE-2020-35847 & CVE-2020-35848 !/usr/bin/python3 import json...
Exploit for SQL Injection in Agentejo Cockpit
Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848...
Metasploit Wrap-Up
Nagios modules Community member Erik Wynter has contributed two more Nagios XI modules this week, on top of the previous week’s contributions! If you’ve noticed Nagios XI 5.6.0 to 5.7.5 running within your target’s infrastructure during a pen test, be sure to check both these new modules out as...
Cockpit CMS 0.11.1 NoSQL Injection / Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/hashes/identify' class MetasploitModule 'Cockpit CMS NoSQLi to RCE', 'Description' = %q This module exploits two NoSQLi vulnerabilities to...
Cockpit CMS 0.11.1 NoSQL Injection / Remote Command Execution Exploit
This Metasploit module exploits two NoSQL injection vulnerabilities to retrieve the user list and password reset tokens from the system. Next, the USER is targeted to reset their password. Then, a command injection vulnerability is used to execute the payload. While it is possible to upload a...
Cockpit CMS NoSQLi to RCE
This module exploits two NoSQLi vulnerabilities to retrieve the user list, and password reset tokens from the system. Next, the USER is targetted to reset their password. Then a command injection vulnerability is used to execute the payload. While it is possible to upload a payload and execute it...
Cockpit CMS Remote Code Execution (CVE-2020-35131)
A remote code execution vulnerability exists in Cockpit CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...