WonderCMS 4.3.2 Cross Site Scripting / Remote Code Execution

Author: prodigiousMind Exploit: Wondercms 4.3.2 XSS to RCE import sys import requests import os import bs4 if lensys.argv4: print"usage: python3 exploit.py loginURL IPAddress Port\nexample: python3 exploit.py http://localhost/wondercms/loginURL 192.168.29.165 5252" else: data = ''' var url =...

Wondercms 4.3.2 - XSS to RCE

Author: prodigiousMind Exploit: Wondercms 4.3.2 XSS to RCE import sys import requests import os import bs4 if lensys.argv4: print"usage: python3 exploit.py loginURL IPAddress Port\nexample: python3 exploit.py http://localhost/wondercms/loginURL 192.168.29.165 5252" else: data = ''' var url =...

Metabase 0.46.6 - Pre-Auth Remote Code Execution Exploit

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646 !/usr/bin/env python3 import socke...

Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)

Summary IBM HTTP Server powered by Apache used by IBM i is vulnerable to an attacker uploading arbitrary files due to improper validation CVE-2023-45802 and obtaining sensitive information due to an out of bounds read flaw CVE-2023-31122 as described in the vulnerability details section. This...

Metabase 0.46.6 Remote Code Execution

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Google Dork: N/A Date: 13-10-2023 Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646...

Metabase 0.46.6 - Pre-Auth Remote Code Execution

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Google Dork: N/A Date: 13-10-2023 Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646...

CVE-2024-24814 Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc

modauthopenidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...

CVE-2024-24814

CVE-2024-24814 affects the mod_auth_openidc OpenID Connect Relying Party module for Apache 2.x. The issue arises from missing input validation on the mod_auth_openidc_session_chunks cookie, which can be manipulated to a very large value, causing the server to work hard, delay responses, and poten...

CVE-2024-24814: Uncontrolled Resource Consumption

modauthopenidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...

uC-HTTP Server Code Execution

The vulnerability of the HTTP server’s header parsing function on the uC-HTTP server is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RLSA-2024:0387 Moderate: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: DoS vulnerability when parsing multipart request body CVE-2023-0662 php: Missing error check and insufficient random bytes...

php:8.1 security update

An update is available for php-pecl-zip, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-xdebug3, php-pecl-rrd, module.php-pecl-rrd, module.php-pecl-zip, php-pecl-apcu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

io.micronaut:micronaut-function-web (2.1.0), io.micronaut:micronaut-http-server-netty (2.1.0) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.0)

io.micronaut:micronaut-http-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.1.0 - io.micronaut:micronaut-http-server-netty 2.1.0 ...

io.micronaut.gcp:micronaut-gcp-function-http (3.5.0), io.micronaut.gcp:micronaut-gcp-function-http-test (3.5.0) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.5.0)

io.micronaut:micronaut-http-server MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.gcp:micronaut-gcp-function-http 3.5.0 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.4.0.m2, <=1.4.1), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.4.0.m2, <=1.4.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.10)

io.micronaut:micronaut-http-server MAVEN version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.4.0.m2, =1.4.0.m2, =1.4.1 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.1.0.m2, <=1.1.2), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.1.0.m2, <=1.1.1) +11 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.4)

io.micronaut:micronaut-http-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.1.0.m2, =1.1.0.m2, =1.1.0.rc2,...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.0.0.m1, <=2.0.0.m3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m2)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.0.0.m1, =2.0.0.m1, =2.0.0.m3 -...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.4.0, <=2.6.0), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.4.0, <=2.6.0) +4 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.3.4)

io.micronaut:micronaut-http-server MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.4.0, =2.4.0, =2.4.0, =2.6.0 -...

com.slack.api:bolt-micronaut (>=1.4.0-rc1, <=1.5.0-m1), fr.cnieg.demo:demo (>=1.3.13, <=4.0.0) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.0)

io.micronaut:micronaut-http-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut =1.4.0-rc1, =1.3.13, =4.0.0 -...

io.micronaut:micronaut-benchmarks (2.0.1), io.micronaut:micronaut-function-web (2.0.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.1)

io.micronaut:micronaut-http-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-benchmarks 2.0.1 - io.micronaut:micronaut-function-web 2.0.1 -...