Lucene search
+L

380 matches found

zdt
zdt
added 2021/08/30 12:0 a.m.179 views

Usermin 1.820 - Remote Code Execution (Authenticated) Exploit

Title: Usermin 1.820 - Remote Code Execution RCE Authenticated Author: Numan Türle Vendor Homepage: https://www.webmin.com/usermin.html Software Link: https://github.com/webmin/usermin Version: =1820 https://www.youtube.com/watch?v=wiRIWFAhz24 !/usr/bin/python3 -- coding: utf-8 -- Usermin - Remot...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/08/27 12:0 a.m.183 views

Usermin 1.820 Remote Code Execution

Title: Usermin 1.820 - Remote Code Execution RCE Authenticated Date: 27.08.2021 Author: Numan Türle Vendor Homepage: https://www.webmin.com/usermin.html Software Link: https://github.com/webmin/usermin Version: =1820 https://www.youtube.com/watch?v=wiRIWFAhz24 !/usr/bin/python3 -- coding: utf-8 -...

7.4AI score
SaveExploits0
FreeBSD
FreeBSD
added 2019/08/17 12:0 a.m.150 views

webmin -- unauthenticated remote code execution

Joe Cooper reports: I've rolled out Webmin version 1.930 and Usermin version 1.780 for all repositories. This release includes several security fixes, including one potentially serious one caused by malicious code inserted into Webmin and Usermin at some point on our build infrastructure. We're...

10CVSS7.7AI score0.99766EPSS
SaveExploits39References1
exploitpack
exploitpack
added 2019/02/28 12:0 a.m.31 views

Usermin 1.750 - Remote Command Execution (Metasploit)

Usermin 1.750 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' = %q...

7.7AI score
SaveExploits0
zdt
zdt
added 2019/02/28 12:0 a.m.49 views

Usermin 1.750 - Remote Command Execution Exploit

Exploit for linux platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' ...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/02/28 12:0 a.m.43 views

Usermin 1.750 Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/02/28 12:0 a.m.83 views

Usermin 1.750 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/03/29 12:0 a.m.30 views

Usermin < 1.430 XSS Vulnerability (Mar 2018) - Linux

Usermin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:usermin"; if...

4.3CVSS5.8AI score0.01645EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/03/27 12:0 a.m.20 views

Usermin 1.430 XSS Vulnerability (Mar 2018) - Windows

Usermin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:usermin"; if...

4.3CVSS5.8AI score0.01645EPSS
SaveExploits0References2
Prion
Prion
added 2017/04/12 10:59 p.m.21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

4.3CVSS6.2AI score0.01114EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/04/12 10:59 p.m.7 views

CVE-2016-4897

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

6.1CVSS5.7AI score0.01114EPSS
SaveExploits0References3
NVD
NVD
added 2017/04/12 10:59 p.m.24 views

CVE-2016-4897

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

6.1CVSS6.2AI score0.01114EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/04/12 10:0 p.m.26 views

CVE-2016-4897

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

6.2AI score0.01114EPSS
SaveExploits0References3
CVE
CVE
added 2017/04/12 10:0 p.m.61 views

CVE-2016-4897

CVE-2016-4897 involves reflected cross-site scripting in Usermin before 1.690. The vulnerabilities affect the CGI endpoints /filter/save_forward.cgi, /filter/save.cgi, and /man/search.cgi, allowing an authenticated user’s browser to execute arbitrary script. The issue is confirmed across multiple...

6.1CVSS6.1AI score0.01114EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2016/10/11 12:0 a.m.8 views

Usermin Cross-Site Scripting Vulnerability

Usermin is a web administration interface for operating user-level tasks developed by Australian software developer Jamie Cameron and the Webmin community, which allows non-root users on Unix systems to perform tasks such as receiving mail, performing SSH and mail forwarding configuration. A...

6.1CVSS6.6AI score0.01114EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/07 4:50 a.m.8 views

Usermin cross-site scripting vulnerabilties

Overview Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Toshinobu Honjo of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC...

6.1CVSS6.1AI score0.01114EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/07 12:0 a.m.40 views

JVN#32504719: Usermin cross-site scripting vulnerabilities

Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the software...

6.1CVSS6.3AI score0.01114EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.10 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the usermin package up to version 1.070-r1 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

6.8CVSS5.4AI score0.02081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.9 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the usermin package up to version 1.090 of the Gentoo Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS5.4AI score0.03608EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/09/16 12:0 a.m.12 views

Usermin Detection

Binary data usermindetect.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder