23 matches found
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 リモートコード実行 脆弱性をトリガーするには、「Software Package Updates」モジュールへのアクセスが必要です。このモジュールにアクセスできるユーザーは、新しいパッケージのインストール時にOSコマンドインジェクションを実行することで、システム上でroot権限のコマンドを実行できます。 HTTPリクエスト: root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 已认证 用于利用 Webmin 1.997 之前版本中通过 Software Package Updates 模块存在的远程代码执行漏洞的 Exploit。 工作原理？ Webmin 的 Software Package Updates 模块在将 u 参数传递给系统之前未能正确进行清理。拥有该模块访问权限的已认证用户可以注入任意命令，这些命令将以 root 身份执行。 前提条件 在运行 Exploit 之前安装依赖项： root@kitploit: pip3 install requests beautifulsoup4...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
Webmin 1.997 に対して Software Package Updates RCE（認証済み）を悪用するPythonスクリプト。 機能 HTTP と HTTPS をサポート（--insecure を使用して自己署名証明書でも動作）。 --command オプションによる単一コマンド実行。 --interactive オプションによる対話型コンソール。...
OPENSUSE-SU-2025:14974-1 ffmpeg-7-7.1.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media
These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14547-1 ansible-core-2.17-2.17.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17-2.17.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12116-1 tensorflow-lite-2.9.1-1.1 on GA media
These are all security issues fixed in the tensorflow-lite-2.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13715-1 kubernetes1.23-apiserver-1.23.17-7.1 on GA media
These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13024-1 libhogweed6-3.9.1-2.1 on GA media
These are all security issues fixed in the libhogweed6-3.9.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12662-1 ceph-16.2.11.58+g38d6afd3b78-1.1 on GA media
These are all security issues fixed in the ceph-16.2.11.58+g38d6afd3b78-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12911-1 libfastjson-devel-1.2304.0-1.1 on GA media
These are all security issues fixed in the libfastjson-devel-1.2304.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10337-1 libwmf-0_2-7-0.2.8.4-243.7 on GA media
These are all security issues fixed in the libwmf-02-7-0.2.8.4-243.7 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10466-1 gpgme-1.8.0-2.1 on GA media
These are all security issues fixed in the gpgme-1.8.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11702-1 log4j-2.17.1-1.1 on GA media
These are all security issues fixed in the log4j-2.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10978-1 libquicktime-1.2.4+git20180804.fff99cd-2.10 on GA media
These are all security issues fixed in the libquicktime-1.2.4+git20180804.fff99cd-2.10 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11675-1 janus-gateway-0.11.6-1.1 on GA media
These are all security issues fixed in the janus-gateway-0.11.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10502-1 bogofilter-common-1.2.4-9.6 on GA media
These are all security issues fixed in the bogofilter-common-1.2.4-9.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12302-1 ansible-2.9.27-2.1 on GA media
These are all security issues fixed in the ansible-2.9.27-2.1 package on the GA media of openSUSE Tumbleweed...