1576 matches found
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 远程代码执行 需要访问"软件包更新"模块才能触发该漏洞。拥有该模块访问权限的用户可以在安装新软件包时,通过执行操作系统命令注入,以 root 权限在系统上运行命令。 HTTP 请求: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000 Cookie: redirect=1; testing=1; sid=05ebaaec3707b0075c641325e9153608 User-Agent: Mozilla/5.0...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
一个用于在 Webmin 1.997 上利用 CVE-2022-36446 软件包更新 RCE(已认证)的 Python 脚本。 功能特性 支持 HTTP 和 HTTPS(通过 --insecure 甚至支持自签名证书)。 通过 --command 选项执行单条命令。 通过 --interactive 选项进入交互式控制台。 用法 $ ./CVE-2022-36446.py -h CVE-2022-36446 - Webmin 1.997 - Software Package Updates RCE Authenticated v1.1 - by Remi GASCOU Podaliri...
CVE-2019-12840.py
CVE-2019-12840.py POC(伪造Shell): CVE-2019-12840(认证RCE - Webmin软件包更新)...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 已认证 用于利用 Webmin 1.997 之前版本中通过 Software Package Updates 模块存在的远程代码执行漏洞的 Exploit。 工作原理? Webmin 的 Software Package Updates 模块在将 u 参数传递给系统之前未能正确进行清理。拥有该模块访问权限的已认证用户可以注入任意命令,这些命令将以 root 身份执行。 前提条件 在运行 Exploit 之前安装依赖项: pip3 install requests beautifulsoup4 lxml urllib3 参...
CVE-2019-12840
CVE-2019-12840 RCE autenticado en Webmin 1.910 - 'Package Updates' Uso : 1- Configure un listener de netcat. 2- python3 exploit.py Notas: Proporcione la URL, por ejemplo: http://:port Copie la cookie 'sid' de su navegador y proporciónela para que el exploit funcione...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...
RHSA-2026:44152 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:45940 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
Photon OS 5.0: Powershell PHSA-2025-5.0-91-0577
An update of the powershell package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0577. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2026-5.0-90-0904
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0904. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2026-5.0-90-0842
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0842. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Ansible PHSA-2024-5.0-91-0184
An update of the ansible package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0184. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CLSA-2026-1779065189 TuxCare security update for 24 packages (9 CVEs)
TuxCare rebuilt 24 packages to address 9 CVEs. Fixed in 9.4.41.v20210516-tuxcare.1...
CLSA-2026-1777336749 TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 42 io.netty packages to address 2 CVEs. Fixed in 4.1.58.Final-tuxcare.2...
CLSA-2025-1764634062 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.29-tuxcare.1...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
RHSA-2026:48273 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
TencentOS Server 4: nodejs-nodemon (TSSA-2026:0762)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0762 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.7 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.7 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...