CVE-1999-0207

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command...

VulnCheck KEV: CVE-2023-50917

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...

EUVD-2000-0035

Malware in sbrugna...

EUVD-1999-1201

Malware in sbrugna...

EUVD-2003-1357

Malware in sbrugna...

EUVD-2010-0376

Malware in sbrugna...

EUVD-2000-0037

Malware in sbrugna...

EUVD-1999-0207

Malware in sbrugna...

CVE-2024-33465

Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...

CVE-2010-0345

Cross-site scripting XSS vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2024-33465

Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...

CVE-2024-33465

Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...

CVE-2024-33465

Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...

CVE-2024-33465

MajorDoMo contains a Cross Site Scripting vulnerability in the thumb/thumb.php component, exploitable to escalate privileges. Affected versions are prior to 0662e5e. Mitigation paths documented include updating to 0662e5e or later, or temporarily restricting access to the thumb/thumb.php componen...

PT-2024-25273 · Majordomo · Majordomo

Name of the Vulnerable Software and Affected Versions: MajorDoMo versions prior to 0662e5e Description: The issue allows an attacker to escalate privileges via the thumb/thumb.php component. This is a Cross Site Scripting vulnerability. Recommendations: For versions prior to 0662e5e, update to...

MajorDoMo Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MajorDoMo Command Injection', 'Description' = %q This module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. ,...

MajorDoMo Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MajorDoMo Command Injection', 'Descriptio...

MajorDoMo Command Injection

This module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. Module Options msf use exploit/linux/http/majordomocmdinjectcve202350917 msf exploitmajordomocmdinjectcve202350917 show targets ...targets... msf exploitmajordomocmdinjectcve202350917 set TARGET msf...

The vulnerability of the implementation of the thumb.php script module on the thumb platform for creating the “Smart Home” MajorDoMo system allows a violator to execute arbitrary commands.

The vulnerability of the thumb.php script implementation in the thumb module of the “Smart Home” MajorDoMo platform is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

MajorDoMo Remote Code Execution Vulnerability

Introduction MajorDoMo, a beacon in Russian home automation and particularly favored by Raspberry Pi aficionados, has been a trusted name for over a decade. With over 380 stars on its official GitHub repository at the time of writing https://github.com/sergejey/majordomo, its popularity is eviden...