FOGProject 安全漏洞

FOGProject is a free open source networked computer cloning and management solution. It can be used to deploy and manage any desktop operating system. A security vulnerability exists in FOGProject 1.5.10 and earlier versions, which stems from configureNFS in lib/common/functions.sh that allows...

FOGProject Path Traversal Vulnerability

FOGProject is a free open source network computer cloning and management solution. It can be used to deploy and manage any desktop operating system. A path traversal vulnerability exists in versions of FOGProject prior to 1.5.10, which stems from the fact that endpoints that provide limited...

FOGProject Code Issues Vulnerabilities

FOGProject is a free open source network computer cloning and management solution. It can be used to deploy and manage any desktop operating system. A code issue vulnerability exists in versions of FOGProject prior to 1.5.10 that stems from allowing unauthenticated users to make GET requests to...

FOGProject Security Breach

FOGProject is a free open source network computer cloning and management solution. It can be used to deploy and manage any desktop operating system. A security vulnerability exists in FOGProject versions prior to 1.5.10.15, which stems from a lack of request cleanup in the logs, where malicious...

FOGProject code issue vulnerability

FOGProject is a free open source network computer cloning and management solution that can be used to deploy and manage any desktop operating system. It can be used to deploy and manage any desktop operating system.A security vulnerability exists in FOGProject that stems from being affected by th...

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

Default credentials

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

CVE-2021-32243

FOGProject v1.5.9 is affected by an authenticated File Upload Remote Code Execution vulnerability. The CVE entry CVE-2021-32243 is supported by multiple connected sources (NVD, CNVD, OSV, CVE list) indicating the issue stems from a File Upload RCE in FOGProject. CVSS v3.1 base score is 8.8 (HIGH)...

CVE-2021-32243: Unrestricted Upload of File with Dangerous Type

FOGProject v1.5.9 is affected by a File Upload RCE Authenticated...

FOGProject 代码问题漏洞

FOGProject is a free open source network computer cloning and management solution that can be used to deploy and manage any desktop operating system. It can be used to deploy and manage any desktop operating system.A security vulnerability exists in FOGProject that stems from being affected by th...

PT-2021-19680

Name of the Vulnerable Software and Affected Versions: FOGProject version 1.5.9 Description: The issue is related to a File Upload Remote Code Execution RCE that requires authentication. Recommendations: For FOGProject version 1.5.9, at the moment, there is no information about a newer version th...

FOGProject 1.5.9 - File Upload Remote Code Execution (Authenticated) Vulnerability

Exploit Title: FOGProject 1.5.9 - File Upload RCE Authenticated Exploit Author: email protected Vendor Homepage: https://fogproject.org Software Link: https://github.com/FOGProject/fogproject/archive/1.5.9.zip Tested on: Debian 10 On the Attacker Machine: 1 Create an empty 10Mb file. dd...

FOGProject 1.5.9 - File Upload RCE (Authenticated)

Exploit Title: FOGProject 1.5.9 - File Upload RCE Authenticated Date: 2021-04-28 Exploit Author: [email protected] Vendor Homepage: https://fogproject.org Software Link: https://github.com/FOGProject/fogproject/archive/1.5.9.zip Tested on: Debian 10 On the Attacker Machine: 1 Create an empty 10Mb...

wiki.fogproject.org XSS vulnerability

Open Bug Bounty ID: OBB-123456 Description| Value ---|--- Affected Website:| wiki.fogproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...