CVE-2023-29929

CVE-2023-29929: Kemp LoadMaster における DNS パケット経由のリモート「Instakill」DoS Kemp LoadMaster デバイス（ファームウェア 7.2.60）は、libkemplink.so ライブラリの isreverse メソッドと locatefqdn メソッドに深刻なバッファオーバーフローの脆弱性が存在します。この脆弱性は、DNS 名に割り当てられた256バイトのバッファサイズが不十分であることに起因し、特殊文字や Unicode 文字を含む細工された DNS リクエストを送信することで悪用される可能性があります。...

CVE-2024-7591-PoC

CVE-2024-7591-PoC これらのPoC Pythonスクリプトは、Kemp LoadMasterのリモートコード実行をテストします。 このツールはテスト目的のみに使用してください これらのスクリプトは、Marius Walter氏によるこのエクスプロイトの詳細な解説に基づいています。彼の記事は以下で読むことができます： https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster の未認証コマンドインジェクション これは、Progress Kemp LoadMaster の未認証コマンドインジェクションの脆弱性 である CVE-2024-1212 用のエクスプロイトスクリプトです。 脆弱性の概要 CVE-2024-1212 は Progress Kemp LoadMaster に影響を与え、未認証の攻撃者 が /access/set エンドポイントに巧妙に細工された HTTP リクエストを送信することで、システム上で任意のコマンドを実行できるようにします。 特徴...

The vulnerability of the load balancer Progress Kemp LoadMaster, related to the failure to perform data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the load balancing device Progress Kemp LoadMaster lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037 , carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run...

Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the dodelapikey method. The issue results from the lack of proper...

Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the apiuser parameter provided to the accessv2 endpoin...

Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the dolistapikeys method. The issue results from the lack of proper...

Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the key parameter. The issue results from the lack of prop...

Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within handling of the customLocation parameter. The issue results from the lack ...

Progress Software Kemp LoadMaster addapikey Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the addapikey command. The...

Progress Software Kemp LoadMaster delcert Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the delcert command. The iss...

Progress Software Kemp LoadMaster getcipherset Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the getcipherset command. Th...

Progress Software Kemp LoadMaster delapikey OS Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the delapikey command. The issue resul...

CVE-2023-29929

Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service via the libkemplink.so, isreverse library...

EUVD-2018-20694

Malware in sbrugna...

EUVD-2021-28825

Malicious code in bioql PyPI...

Exploit for OS Command Injection in Kemptechnologies Loadmaster

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadM...

Exploit for OS Command Injection in Progress Loadmaster

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Comma...

Progress Software Kemp LoadMaster mangle Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mangle executable. The issue results from the lack of proper...