Creatio Login Panel - Detect

Creatio login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Creatio login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Creatio Login Panel - Detect', 'description': 'Creatio...

CVE-2024-25461

Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component...

CVE-2024-25461: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component...

CVE-2024-25461

A Directory Traversal vulnerability exists in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 . A remote attacker can exploit this by sending a crafted request to the terrasoft.axd component to obtain sensitive information and potentially access unauthorized data. As a workaround, it is recommende...

Creatio Terrasoft CRM Security Breach

Creatio Terrasoft CRM is a customer relationship management system from Creatio. A security vulnerability exists in Creatio Terrasoft CRM version v.7.18.4.1532. A remote attacker can exploit this vulnerability to obtain sensitive information via a specially crafted request to the terrasoft.axd...

PT-2024-20958 · Terrasoft · Creatio Terrasoft Crm

Name of the Vulnerable Software and Affected Versions: Creatio Terrasoft CRM version 7.18.4.1532 Description: The issue allows a remote attacker to obtain sensitive information via a crafted request to the "terrasoft.axd" component. This enables the attacker to potentially access unauthorized dat...

VulnCheck KEV: CVE-2024-25461

Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component...

PT-2023-4204

Name of the Vulnerable Software and Affected Versions Terrasoft affected versions not specified Creatio affected versions not specified Description The issue is related to the ConnectionStrings.config component in Terrasoft CRM system and Creatio BPM system, where there is an incorrect restrictio...

Terrasoft CRM ConnectionStrings.config Unauthorized Access

The vulnerability of the ConnectionStrings.config component in the “Terrasoft” CRM system and the “Creatio” BPM system is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...