CVE-2023-38646

Metabase RCE pre-autenticazione CVE-2023-38646 PoC Questo è uno script Python che sfrutta la vulnerabilità di esecuzione di codice remoto del software di login di Metabase. Permette di eseguire comandi arbitrari sul server prima dell'autenticazione. Le versioni vulnerabili sono Metabase open sour...

MetabaseRCE_CVE-2023-38646

Metabase Pré-Auth RCE CVE-2023-38646 PoC Uma prova de conceito da CVE-2023-38646, um exploit do Metabase que permite ao usuário executar código remotamente utilizando o token de configuração setup token encontrado em /api/session/properties para enviar um payload codificado em base64. Uso...

CVE-2023-38646

CVE-2023-38646 Metabase RCE pre-autenticazione 11/26/2023 Le versioni di Metabase open source precedenti alla 0.46.6.1 e di Metabase Enterprise precedenti alla 1.46.6.1 consentono agli aggressori di eseguire comandi arbitrari sul server, al livello di privilegio del server. Per lo sfruttamento no...

CVE-2023-38646-PoC

CVE-2023-38646 – Metabase Pre-auth RCE Metabase Open Source vor 0.46.6.1 und Metabase Enterprise vor 1.46.6.1 erlauben Angreifern, beliebige Befehle auf dem Server mit den Berechtigungen des Servers auszuführen. Für die Ausnutzung ist keine Authentifizierung erforderlich. Die weiteren behobenen...

CVE-2023-38646

Metabase Pre-Autenticazione RCE CVE-2023-38646 Abbiamo fornito due file:- CVE-2023-38646-POC.py per verificare se una qualsiasi istanza Metabase sta perdendo il setup-token. CVE-2023-38646-Reverse-Shell.py per ottenere una reverse shell sulla macchina controllata dall'attaccante...

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC Dies ist ein in Python geschriebenes Skript, das die Ausnutzung der in CVE-2023-38646 beschriebenen Sicherheitslücke der Metabase -Software ermöglicht. Das System ist in Versionen vor 0.46.6.1 der Open-Source-Edition und vor 1.46.6.1 der Enterprise-Edition...

CVE-2023-38646

CVE-2023-38646 Das ursprüngliche Skript stammt von securezeron Während der Tests habe ich festgestellt, dass die Reverse-Shell, die von diesem POC generiert wurde, nach der Base64-Kodierung aufgrund des '='-Zeichens am Ende fehlschlug. Ich habe es leicht modifiziert, um dieses Problem zu beheben...

Exploit-CVE-2023-38646-Metabase

Exploit CVE-2023-38646 Metabase prima di 0.46.6.1 open source e prima di 1.46.6.1 Enterprise Exploit per la vulnerabilità di Esecuzione di Codice Remoto RCE identificata in Metabase versioni precedenti alla 0.46.6.1 open source e 1.46.6.1 Enterprise. La vulnerabilità consente agli attaccanti di...

AZL-35452 CVE-2024-26594 affecting package hyperv-daemons for versions less than 5.15.153.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid...

Exploit for CVE-2023-38646

Exploit CVE-2023-38646 Metabase before 0.46.6.1 open source...

Metabase 0.46.6 Remote Code Execution

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Google Dork: N/A Date: 13-10-2023 Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646...

Exploit for CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE 11/26/2023 Metabase ope...

Exploit for CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...

Exploit for CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...

Exploit for CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a python sc...

Exploit for CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a script w...

Metabase Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Metabase Setup Token RCE', 'Description' = %q Metabase versions before 0.46.6.1 contain a flaw where the secret setup-token is accessible even...

Metabase Setup Token RCE

Metabase versions before 0.46.6.1 contain a flaw where the secret setup-token is accessible even after the setup process has been completed. With this token a user is able to submit the setup functionality to create a new database. When creating a new database, an H2 database string is created wi...