343 matches found
ipfire-2-25-auth-rce
Ipfire 2-25 core update 156 प्रमाणित RCE किसी भी पैकेज को इंस्टॉल करते समय सिस्टम कमांड चलाता है सिस्टम सिर्फ HTML से 7zip प्राप्त करता है और tmp निर्देशिका की जाँच करें संस्करण 2.25 - कोर अपडेट 156 ipfire लॉगिन के बाद nobody के रूप में मनमाना OS कमांड चलाने की अनुमति देता है रूट बनें! suid बाइनर...
IPFire_2.25_RCE_Authenticated
IPFire 2.25 रिमोट कोड निष्पादन प्रमाणित - CVE-2021-33393 यह एक्सप्लॉइट CVE-2021-33393 https://nvd.nist.gov/vuln/detail/CVE-2021-33393 पर आधारित है और मूल एक्सप्लॉइट पर बनाया गया है, जिसे Mücahit Saratar https://github.com/KaanaryOverFlow/ipfire-2-25-auth-rce द्वारा विकसित किया गया था, इसे रूट...
IPFire_2.19_RCE_Authenticated
إثبات المفهوم PoC لثغرة RCE في IPFire 2.19 عبر OINKCODE إثبات مفهوم بلغة Python لثغرة حقن الأوامر المصادَق عليها في صفحة ids.cgi الخاصة بـ IPFire 2.19 عبر معامل OINKCODE. مخصص للاختبارات الأمنية المصرّح بها والمختبرات التدريبية فقط. شغّل هذا الـ PoC فقط ضد أنظمة تمتلكها أو لديك إذن صريح لاختبارها...
CVE-2014-6271-IPFire
CVE-2014-6271 CVE-2014-6271 का Python कार्यान्वयन: IP Fire =2.15 ShellShock RCE उसी शोषण के लिए Metasploit मॉड्यूल पर आधारित EDB ID: 34839 शोषण स्वचालित है। स्विचों की पूरी श्रृंखला के लिए ./CVE-2014-6271.py --help देखें चेतावनी: इस रिपॉजिटरी में कोड का उपयोग केवल शैक्षणिक/नैतिक उद्देश्यों के लिए...
Exploit for CVE-2021-33393
IPFire2.25RCEAuthenticated This exploit is based on CVE-202...
CVE-2019-25400
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through multiple parameters including HOSTNAME, IP, SUBNET, NETREMARK, HOSTREMARK, newhost, grpname, remark, SRVNAME, SRVPORT,...
CVE-2019-25399
IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious scripts through the FS, PATH, and UUID parameters. Attackers can submit POST requests with script payloads in these parameters to execute...
CVE-2019-25399
IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious scripts through the FS, PATH, and UUID parameters. Attackers can submit POST requests with script payloads in these parameters to execute...
CVE-2019-25400
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through multiple parameters including HOSTNAME, IP, SUBNET, NETREMARK, HOSTREMARK, newhost, grpname, remark, SRVNAME, SRVPORT,...
CVE-2019-25398
IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts through VPN configuration parameters. Attackers can submit POST requests with script payloads in parameters like VPNIP, DMTU, ccdname,...
CVE-2019-25398
IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts through VPN configuration parameters. Attackers can submit POST requests with script payloads in parameters like VPNIP, DMTU, ccdname,...
CVE-2019-25397
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the KEY1, IP, HOST, or DOM parameters to...
CVE-2019-25397
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the KEY1, IP, HOST, or DOM parameters to...
CVE-2019-25396
IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST parameters. Attackers can submit crafted requests with script payloads in the MAXDISKUSAGE or MAXDOWNLOADRATE paramete...
CVE-2019-25396
IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST parameters. Attackers can submit crafted requests with script payloads in the MAXDISKUSAGE or MAXDOWNLOADRATE paramete...
CVE-2019-25400 IPFire 2.21 Core Update 127 Multiple XSS via fwhosts.cgi
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through multiple parameters including HOSTNAME, IP, SUBNET, NETREMARK, HOSTREMARK, newhost, grpname, remark, SRVNAME, SRVPORT,...
CVE-2019-25400
CVE-2019-25400 affects IPFire 2.21 Core Update 127. The vulnerabilities are multiple reflected XSS in the fwhosts.cgi script, exploitable via numerous parameters (e.g., HOSTNAME, IP, SUBNET, NETREMARK, HOSTREMARK, newhost, grp_name, remark, SRV_NAME, SRV_PORT, SRVGRP_NAME, SRVGRP_REMARK, updatesr...
CVE-2019-25400 IPFire 2.21 Core Update 127 Multiple XSS via fwhosts.cgi
IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious scripts through multiple parameters including HOSTNAME, IP, SUBNET, NETREMARK, HOSTREMARK, newhost, grpname, remark, SRVNAME, SRVPORT,...
CVE-2019-25399 IPFire 2.21 Core Update 127 Stored XSS via extrahd.cgi
IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious scripts through the FS, PATH, and UUID parameters. Attackers can submit POST requests with script payloads in these parameters to execute...
CVE-2019-25399 IPFire 2.21 Core Update 127 Stored XSS via extrahd.cgi
IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious scripts through the FS, PATH, and UUID parameters. Attackers can submit POST requests with script payloads in these parameters to execute...