12 matches found
CVE-2021-28079
CVE-2021-28079 - POC Jamovi file example.omv example.omv: Zip archive data, at least v2.0 to extract All OMV files are archived data. So, you can extract it and modify to exploit the XSS bug. π₯\ unzip example.omv Archive: example.omv inflating: META-INF/MANIFEST.MF inflating: index.html inflating...
EUVD-2021-14785
Malware in sbrugna...
CVE-2021-28079
Jamovi =1.6.18 is affected by a cross-site scripting XSS vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv Jamovi document containing a payload. When opened by victim, the payload is triggered...
Jamovi Cross-Site Scripting Vulnerability
jamovi is jamovi open source a free and open statistics platform. Jamovi has a cross-site scripting vulnerability in version 1.6.18 and earlier. In ElectronJS framework , the listing is vulnerable to XSS attacks. An attacker can exploit the vulnerability to craft a .omv document containing a...
CVE-2021-28079
Jamovi =1.6.18 is affected by a cross-site scripting XSS vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv Jamovi document containing a payload. When opened by victim, the payload is triggered...
CVE-2021-28079
Summary: CVE-2021-28079 affects Jamovi versions
jamovi θ·¨η«θζ¬ζΌζ΄
jamovi is jamovi open source a free and open statistics platform. Jamovi has a cross-site scripting vulnerability in version 1.6.18 and earlier. In ElectronJS framework , the listing is vulnerable to XSS attacks. An attacker can exploit the vulnerability to craft a .omv document containing a...
CVE-2021-28079: Improper Neutralization of Input During Web Page Generation
Jamovi =1.6.18 is affected by a cross-site scripting XSS vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv Jamovi document containing a payload. When opened by victim, the payload is triggered...
Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code Execution', 'Description' = %q This module exploits a Remote...
Exodus Wallet (ElectronJS Framework) Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code Execution', 'Description' = %q This module exploits a Remote...
Exodus Wallet (ElectronJS Framework) - Remote Code Execution Exploit
Exploit for windows platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code...
Exodus Wallet (ElectronJS Framework) remote Code Execution
This module exploits a Remote Code Execution vulnerability in Exodus Wallet, a vulnerability in the ElectronJS Framework protocol handler can be used to get arbitrary command execution if the user clicks on a specially crafted URL. Module Options msf use exploit/windows/browser/exodus msf...