229 matches found
CVE-2023-36250
CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...
CVE-2022-24707
PoC for CVE-2022-24707 SQL Injection Vulnerability on Puncher plugin. A POST request can be crafted to exploit SQL Injection and leak database contents. This is tested on Anuko Time Tracker 1.20.0.5640. python3 exploit.py --help usage: exploit.py -h --username USERNAME --password PASSWORD --host...
CVE-2022-24707_AnukoTimeTracker_Version-1.20.0_POC
CVE-2022-24707 Anuko Time Tracker SQL Injection Exploit A security assessment tool that demonstrates a SQL injection vulnerability in Anuko Time Tracker's Version 1.20.0 puncher feature. This tool helps to Dump the whole ttusers Database and revels every single entry, If used as per following the...
Anuko Time Tracker CVE-2022-24707 Detect
Fingerprints Anuko Time Tracker login/register surface. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprints Anuko Time Tracker login/register surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Anuko Time...
Anuko Time Tracker CVE-2022-24707 puncher SQLi
CVE-2022-24707 Anuko = 1.20.0.5640: authenticated SQLi in puncher.php date parameter writes ttusers credentials into the entry note field. !/usr/bin/env python3 -- coding: utf-8 -- """Anuko Time Tracker CVE-2022-24707 puncher date SQLi credential extract.""" from future import annotations import ...
Exploit for SQL Injection in Anuko Time_Tracker
CVE-2022-24707 - Anuko Time Tracker SQL Injection Authenticat...
Anuko Time Tracker 1.20.0.5640 SQL Injection
Anuko Time Tracker versions prior to 1.20.0.5642 contain an authenticated SQL injection vulnerability in the Puncher plugin. A proof of concept is provided to inject a scalar SQL query through the date parameter and read its result. https://packetstorm.news/download/237259...
Astra Linux - Vulnerability in mariadb-10.3
A segmentation fault was discovered in MariaDB versions 10.2 through 10.7 in the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...
EUVD-2020-19933
Malware in sbrugna...
EUVD-2019-3811
Malware in sbrugna...
EUVD-2020-7266
Malware in sbrugna...
EUVD-2015-6688
Malware in sbrugna...
EUVD-2021-16061
Malware in sbrugna...
EUVD-2021-19494
Malware in sbrugna...
EUVD-2021-28256
Malicious code in bioql PyPI...
EUVD-2022-53357
Malicious code in bioql PyPI...
EUVD-2025-27113
Malicious code in bioql PyPI...
EUVD-2022-29573
Malicious code in bioql PyPI...