EUVD-2017-3293

Malware in sbrugna...

EUVD-2017-3291

Malware in sbrugna...

EUVD-2017-3292

Malware in sbrugna...

Hashtopussy Access Control Error Vulnerability

Hashtopussy is a cross-platform client-server tool for distributing hash table tasks between multiple computers, featuring portability, stability and multi-user support. An access control error vulnerability exists in Hashtopussy version 0.4.0. A remote attacker could exploit this vulnerability t...

Hashtopussy Cross-Site Request Forgery Vulnerability

Hashtopussy is a cross-platform client-server tool for distributing hash table tasks between multiple computers, featuring portability, stability and multi-user support. A cross-site request forgery vulnerability exists in Hashtopussy version 0.4.0. A remote attacker can exploit this vulnerabilit...

Hashtopussy Cross-Site Scripting Vulnerability

Hashtopussy is a cross-platform client-server tool for distributing hash table tasks between multiple computers, featuring portability, stability and multi-user support. A cross-site scripting vulnerability exists in Hashtopussy version 0.4.0. A remote attacker can exploit this vulnerability with...

Improper access control

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php...

CVE-2017-11681

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11682

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

Cross site scripting

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

CVE-2017-11682

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11681

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php...

CVE-2017-11682

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

CVE-2017-11680

In Hashtopussy 0.4.0, a Cross-Site Request Forgery (CSRF) vulnerability exists that enables an attacker to change the administrator password via the users.php endpoint. The issue is documented across multiple sources (CVE-2017-11680) with CVSS v3.0 base score 8.8 (HIGH) and CVSS v2.0 base score 6...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11681

Hashtopussy 0.4.0 is affected by CVE-2017-11681, an Incorrect Access Control vulnerability where remote authenticated users can perform actions reserved for administrators (demonstrated via a createVoucher request to agents.php). No remediation details are provided in the connected documents; the...

CVE-2017-11682

Hashtopussy 0.4.0 contains a Stored Cross‑Site Scripting (XSS) vulnerability accessible through hashcat.php via the (1) version, (2) url, or (3) rootdir parameters. Affected software: Hashtopussy (0.4.0). Root cause: improper handling of input in hashcat.php allowing arbitrary web script or HTML ...