23 matches found
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 リモートコード実行 脆弱性をトリガーするには、「Software Package Updates」モジュールへのアクセスが必要です。このモジュールにアクセスできるユーザーは、新しいパッケージのインストール時にOSコマンドインジェクションを実行することで、システム上でroot権限のコマンドを実行できます。 HTTPリクエスト: root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
Webmin 1.997 に対して Software Package Updates RCE（認証済み）を悪用するPythonスクリプト。 機能 HTTP と HTTPS をサポート（--insecure を使用して自己署名証明書でも動作）。 --command オプションによる単一コマンド実行。 --interactive オプションによる対話型コンソール。...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 認証済み Webmin バージョン 1.997 未満における Remote Code Execution の脆弱性のための Exploit。Software Package Updates モジュールを介して。 動作の仕組み Webmin の Software Package Updates モジュールは、パラメータ u をシステムに渡す前に適切にサニタイズしません。そのモジュールにアクセスできる認証済みユーザーは、root として実行される任意のコマンドを注入できます。 前提条件 Exploit...
OPENSUSE-SU-2025:14974-1 ffmpeg-7-7.1.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media
These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14547-1 ansible-core-2.17-2.17.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17-2.17.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12911-1 libfastjson-devel-1.2304.0-1.1 on GA media
These are all security issues fixed in the libfastjson-devel-1.2304.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12116-1 tensorflow-lite-2.9.1-1.1 on GA media
These are all security issues fixed in the tensorflow-lite-2.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13024-1 libhogweed6-3.9.1-2.1 on GA media
These are all security issues fixed in the libhogweed6-3.9.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12662-1 ceph-16.2.11.58+g38d6afd3b78-1.1 on GA media
These are all security issues fixed in the ceph-16.2.11.58+g38d6afd3b78-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13715-1 kubernetes1.23-apiserver-1.23.17-7.1 on GA media
These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10466-1 gpgme-1.8.0-2.1 on GA media
These are all security issues fixed in the gpgme-1.8.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10978-1 libquicktime-1.2.4+git20180804.fff99cd-2.10 on GA media
These are all security issues fixed in the libquicktime-1.2.4+git20180804.fff99cd-2.10 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10337-1 libwmf-0_2-7-0.2.8.4-243.7 on GA media
These are all security issues fixed in the libwmf-02-7-0.2.8.4-243.7 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11702-1 log4j-2.17.1-1.1 on GA media
These are all security issues fixed in the log4j-2.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12302-1 ansible-2.9.27-2.1 on GA media
These are all security issues fixed in the ansible-2.9.27-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10502-1 bogofilter-common-1.2.4-9.6 on GA media
These are all security issues fixed in the bogofilter-common-1.2.4-9.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11675-1 janus-gateway-0.11.6-1.1 on GA media
These are all security issues fixed in the janus-gateway-0.11.6-1.1 package on the GA media of openSUSE Tumbleweed...