34 matches found
CVE-2023-50612
Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter...
fit2cloud Cloud Explorer Lite Security Vulnerability
fit2cloud Cloud Explorer Lite is an open source lightweight cloud management platform. A security vulnerability exists in fit2cloud Cloud Explorer Lite version 1.4.1. A local attacker exploited the vulnerability to elevate privileges and obtain sensitive information via the cloud accounts paramet...
PT-2024-13947 · Fit2Cloud · Fit2Cloud Cloud Explorer Lite
Name of the Vulnerable Software and Affected Versions: fit2cloud Cloud Explorer Lite version 1.4.1 Description: The issue allows local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter. This is due to an Insecure Permissions vulnerability...
Exploit for Improper Authentication in Fit2Cloud Jumpserver
CVE-2023-42442 CVE-2023-42442 – JumpServer Session recording...
Exploit for Improper Authentication in Fit2Cloud Jumpserver
BlackJump Chinese |...
Exploit for Improper Authentication in Fit2Cloud Jumpserver
BlackJump Chinese |...
Exploit for Path Traversal in Fit2Cloud Jumpserver
CVE-2023-42819 CVE-2023-42819 Description of the Vulne...
CVE-2023-42405
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...
Sql injection
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...
CVE-2023-42405
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...
PT-2023-28330 · Fit2Cloud · Fit2Cloud Rackshift
Name of the Vulnerable Software and Affected Versions: FIT2CLOUD RackShift version 1.7.1 Description: The issue allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list API endpoints. This enables attackers to potentially...
CVE-2023-42405
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...
CVE-2023-42405
The CVE-2023-42405 issue affects FIT2CLOUD RackShift v1.7.1. It is a SQL injection vulnerability exposed via the sort parameter in the API endpoints taskService.list(), bareMetalService.list(), and switchService.list(), potentially allowing an attacker to execute arbitrary code. According to PT-S...
