CVE-2024-4358

Telerik Report Server 认证绕过 - CVE-2024-4358 概述 在 Progress Telerik Report Server 2024 Q1 10.0.24.305 及更早版本中，在 IIS 上，未经身份验证的攻击者可以通过身份验证绕过漏洞获取对 Telerik Report Server 受限功能的访问权限。 了解更多 — CVE-2024-4358 免责声明...

CVE-2024-4358

Telerik Report Server 认证绕过 - CVE-2024-4358 免责声明 ：本概念验证（POC）仅供教育和道德测试目的使用。在未事先获得双方同意的情况下，使用此工具攻击目标是非法的。最终用户有责任遵守所有适用的地方、州和联邦法律。开发者不承担任何责任，也不对因使用本程序造成的任何滥用或损害负责。 开始使用 查找目标 要查找潜在目标，请使用 Fofa（类似于 Shodan.io）： FOFA 搜索语法 ：title="Telerik Report Server" 克隆仓库 首先，克隆仓库： root@kitploit: git clone...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server 反序列化和认证绕过漏洞链，针对 CVE-2024-4358/CVE-2024-1800 技术分析 关于该漏洞的根因分析可在我的博客中找到 poc 概述 支持的版本？ 在漏洞发布时基本支持所有版本，为便于未来参考，以下列表中的每个主/次版本： root@kitploit: 2012 2017 2018 2019 2020 2021 2022 2023 2024 用法 root@kitploit: python CVE-2024-4358.py --target...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Cadena de explotación de deserialización y evasión de autenticación de Telerik Report Server para CVE-2024-4358/CVE-2024-1800 Análisis técnico Puede encontrar un análisis de causa raíz de la vulnerabilidad en mi blog Uso root@kitploit: python CVE-2024-4358.py --targe...

📄 Telerik Report Server 2024 Q1-10.0.24.305 Remote Code Execution

Telerik Report Server versions 2024 Q1 10.0.24.305 and potentially earlier contain a critical vulnerability that allows unauthenticated attackers to achieve remote code execution through insecure deserialization in report processing functionality. The vulnerability exists due to improper input...

EUVD-2024-48237

Malicious code in bioql PyPI...

EUVD-2024-48887

Malicious code in bioql PyPI...

EUVD-2024-48236

Malicious code in bioql PyPI...

EUVD-2024-48238

Malicious code in bioql PyPI...

EUVD-2025-1753

Malicious code in bioql PyPI...

EUVD-2024-47441

Malicious code in bioql PyPI...

EUVD-2024-43993

Malicious code in bioql PyPI...

Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass

Exploit Title: Progress Telerik Report Server 2024 Q1 10.0.24.305 - Authentication Bypass Fofa Dork: title="Telerik Report Server" Date: 2024-09-22 Exploit Author: VeryLazyTech GitHub: https://github.com/verylazytech/CVE-2024-4358 Vendor Homepage: https://www.telerik.com/report-server Software...

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

Progress Telerik Report Server < 11.0.25.211 Cleartext Transmission

The version of Progress Telerik Report Server installed on the remote host is affected by an cleartext transmission vulnerability. In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive...

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

CVE-2025-0556

In Progress Telerik Report Server, before 2025 Q1 (11.0.25.211) using the older .NET Framework implementation, the communication of non-sensitive information between the service agent process and the app host process happens over an unencrypted tunnel, exposing it to potential local network traff...

CVE-2025-0556 Telerik Report Server Clear Text Transmission of Agent Commands

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

CVE-2024-7295

In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...