434 matches found
CVE-2006-3392
CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...
CVE-2006-3392
CVE-2006-3392 About the vulnerability A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to...
CVE-2006-3392
CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...
CVE-2006-3392
It is a simple tool to exploit Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure . vulnerabilities How to use: 1-Run the script python exploit.py . 2-put the port . 3-Select the folder you want to view . ⛔ Important ⛔ We are not responsible for the use of this script in an unethical act...
CVE-2006-3392
CVE-2021-42913 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from...
Usermin 2.100 - Username Enumeration
Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...
Webmin CVE-2019-12840 Detect
Detects Webmin / Usermin login. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Webmin / Usermin login.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Webmin CVE-2019-12840 Detect", "description": "Detects Webm...
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...
Usermin Panel - Detect
Usermin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Usermin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Usermin Panel - Detect', 'description': 'Usermin panel was...
Usermin 2.100 - Username Enumeration Detection
Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Usermin version 2.""" from...
CVE-2023-40986
A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...
Exploit for Generation of Error Message Containing Sensitive Information in Webmin Usermin
No d...
ROS-20251105-05
Vulnerability of passwordchange.cgi script of Webmin hosting control panel and web-interface for unix-like systems Usermin is related to flaws in error reporting mechanism. unix-like systems Usermin is related to a flaw in the error reporting mechanism. Exploitation of the vulnerability could all...
EUVD-2015-2190
Malware in sbrugna...
EUVD-2002-0749
Malware in sbrugna...
EUVD-2004-1462
Malware in sbrugna...
EUVD-2004-0582
Malware in sbrugna...
EUVD-2004-0587
Malware in sbrugna...