CVE-2020-10220

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

CVE-2020-10548

rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices...

CVE-2020-10221

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter...

CVE-2019-16662

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution...

CVE-2019-16663

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution...

rConfig WebUI Detection

Binary data rconfigservicedetect.nbin...

rConfig RCE (CVE-2020-10221)

The version of rConfig installed on the remote host is affected by a remote code executionvulnerability, as follows: - The flaw exists due to insufficient input validation in the userAdmin.inc.php component, which allows an unauthenticated attacker to upload arbitrary files to the server. By...

EUVD-2020-18046

Malware in sbrugna...

EUVD-2020-18040

Malware in sbrugna...

EUVD-2020-19976

Malware in sbrugna...

EUVD-2021-15650

Malware in sbrugna...

EUVD-2019-9202

Malware in sbrugna...

EUVD-2020-19974

Malware in sbrugna...

EUVD-2020-18038

Malware in sbrugna...

EUVD-2021-15651

Malware in sbrugna...

EUVD-2019-8838

Malware in sbrugna...

EUVD-2020-18039

Malware in sbrugna...

EUVD-2020-15903

Malware in sbrugna...

EUVD-2020-4571

Malware in sbrugna...

EUVD-2020-7701

Malware in sbrugna...