1711 matches found
📄 aaPanel 7.x.x Remote Command Execution
aaPanel version 7.x.x suffers from an authenticated remote command execution vulnerability. This was discovered prior and noted in CVE-2020-14421 where it states that it affects versions 6.6.6 and below. The developers claim it is patched but it still affects the 7.x.x version. This is...
Cron Persistence
This module will create a cron or crontab entry to execute a payload. The module includes the ability to automatically clean up those entries to prevent multiple executions. syslog will get a copy of the cron entry. Verified on Ubuntu 22.04.1, MacOS 13.7.4 Module Options msf use...
FreePBX ajax.php unauthenticated SQLi to RCE
This module exploits an unauthenticated SQL injection flaw in FreePBX prior to versions 15.0.66, 16.0.89, and 17.0.3. The vulnerability lies in the /admin/ajax.php endpoint, which is accessible without authentication. Additionally, the database user created by FreePBX can schedule cronjobs,...
Linux Distros Unpatched Vulnerability : CVE-2019-9706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use- after-free and daemon crash because of a forcerescanuser...
Linux Distros Unpatched Vulnerability : CVE-2023-22622
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes...
Linux Distros Unpatched Vulnerability : CVE-2020-5202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program...
CVE-2025-33120
IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges...
PT-2025-34370 · Ibm · Qradar Siem
Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 UP13 Description: IBM QRadar SIEM versions 7.5 through 7.5.0 UP13 may allow an authenticated user to escalate their privileges. This is due to a misconfigured cronjob that executes with unnecessary...
Malicious code in async-authenticate-iota-cron-table (npm)
The package async-authenticate-iota-cron-table was found to contain malicious code...
Malicious code in air-cron-moon-compress-hash (npm)
The package air-cron-moon-compress-hash was found to contain malicious code...
Malicious code in delta-phi-pipe-cron-cache (npm)
The package delta-phi-pipe-cron-cache was found to contain malicious code...
Malicious code in import-cron-test-decompress-log (npm)
The package import-cron-test-decompress-log was found to contain malicious code...
MAL-2025-18242 Malicious code in delta-phi-pipe-cron-cache (npm)
The package delta-phi-pipe-cron-cache was found to contain malicious code...
MAL-2025-27738 Malicious code in notify-index-secure-process-cron (npm)
The package notify-index-secure-process-cron was found to contain malicious code...
Malicious code in process-alpha-deploy-cron-array (npm)
The package process-alpha-deploy-cron-array was found to contain malicious code...
Malicious code in phi-orchestrate-cron-hash-function (npm)
The package phi-orchestrate-cron-hash-function was found to contain malicious code...
Malicious code in promise-cron-key-sudo-analyze (npm)
The package promise-cron-key-sudo-analyze was found to contain malicious code...
Malicious code in notify-index-secure-process-cron (npm)
The package notify-index-secure-process-cron was found to contain malicious code...