OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC per la vulnerabilità NotProxyShell OWASSRF CVE-2022-41082 che colpisce i server Microsoft Exchange. Questa è una RCE post-autenticazione per ProxyNotShell OWASSRF, sono necessarie credenziali valide per l'esecuzione dei comandi. Aggiunto lo script PoC Powershell per la...

CVE-2023-20209

Ho iniziato a esaminare Cisco Expressway dopo aver notato parecchi di questi dispositivi su Internet durante gli engagement di Red Team, ma non ho mai avuto il tempo durante il lavoro di approfondire ulteriormente il prodotto. Inizialmente cercavo un bypass dell'autenticazione per innescare una...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF भेद्यता के लिए PoC जो Microsoft Exchange सर्वरों को प्रभावित करती है यह ProxyNotShell OWASSRF के लिए पोस्ट-प्रमाणीकरण RCE है, कमांड निष्पादन के लिए मान्य प्रमाण-पत्र आवश्यक हैं। TabShell भेद्यता CVE-2022-41076 के लिए Powershell PoC स्क्रिप्ट...

Crater-CVE-2023-46865-RCE

Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 Post-Auth RCE Superadmin Schwachstellenbeschreibung Crater Invoice ist anfällig für uneingeschränkte Datei-Uploads mit gefährlichem Typ aufgrund fehlender ordnungsgemäßer Eingabevalidierung. Die Base64Mime-Prüfklasse kann umgangen werden,...

CVE-2019-11539

CVE-2019-11539 Scoperta originale: Orange Tsai, Meh Chang Autori: Justin Wagner, Alyssa Herrera Ringraziamenti a: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Descrizione della vulnerabilità Nelle versioni di Pulse Secure Pulse Connect Secure 9.0RX precedenti alla 9.0R3.4, 8.3RX precedenti alla...

Fedora 42 : roundcubemail (2025-70701de9de)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-70701de9de advisory. This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE...

FreeBSD : Post-Auth Remote Code Execution found in Roundcube Webmail (0d6094a2-4095-11f0-8c92-00d861a0e66d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0d6094a2-4095-11f0-8c92-00d861a0e66d advisory. Roundcube Webmail reports: Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v Tenable...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Design/Logic Flaw

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event listener AbstractPostAjaxBehavior in all pages other than the login page. This listener decodes and deserializes the data query parameter. We can access this listener by...