CVE-2022-39197-POC

CVE-2022-39197-POC 중국어 버전READMECN.md 취약점 소개 CobaltStrike가 9월 20일에 공식 출시한 최신 버전 4.7.1의 Update Log에 따르면, teamserver 버전 저희는 'Beichendream'이라는 독립 연구원으로부터 팀 서버에서 발견된 XSS 취약점에 대해 연락을 받았습니다. 이는 공격자가 Beacon 구성에 잘못된 사용자 이름을 설정하여 원격으로 RCE 코드를 실행할 수 있게 합니다. POC 소개 현재 이 POC는 teamserver 폭탄 이미지만 구현할 수 있습니다...

Cobaltstrike-RCE-CVE-2022-39197

Riproduzione della vulnerabilità RCE di Cobaltstrike CVE-2022-39197 Sintesi della vulnerabilità Questa vulnerabilità è presente nel software Beacon di Cobalt Strike e potrebbe consentire a un aggressore di impostare un nome utente malformato nella configurazione di Beacon, innescando una XSS che...

CVE-2021-21335

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

CVE-2021-21335 Basic Authentication can be bypassed using a malformed username

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

spnego-http-auth-nginx-module 授权问题漏洞

Sean Timothy Noonan spnego-http-auth-nginx-module is a Sean Timothy Noonan open source application. It provides a way to add SPNEGO support to nginx functionality. A security vulnerability exists in SPNEGO HTTP Authentication Module for nginx, which stems from the fact that basic authentication c...

CVE-2001-0060

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username...

CVE-2001-0320

bbsmilies.php and bbcoderef.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. dot dot sequences into a malformed username argument...