THM-Source-CVE-2019-15231

THM-Source-CVE-2019-15231 A write up on the TryHackMe room Source & a python script to exploit the vulnerability CREDITS I dont take any credits for the discovery of this vulnerabilty. Thank you to the following people for providing the resources so people like me can learn! Vulnerability...

cve-2019-15107

CVE-2019-15107 - Webmin Unauthenticated RCE Description This repository contains a proof-of-concept PoC exploit for CVE-2019-15107 affecting Webmin versions 1.890 through 1.920. The script exploits a backdoor in versions 1.890 through 1.920 that allows unauthenticated users to inject commands int...

oxasploits

oxasploits A number of exploits written by oxagast Most of these CVEs are accreddited to oxagast as well Contact: Marshall Whittaker [email protected] CVEs and PoC code CVE-2006-3392 Webmin =1.29 remote root exploit This exploit, lifts a Webmin cookie with a directory transversal and aritrar...

CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. docker build -t VulnWebmin . docker run --name VulnWebmin -d --rm -p...

Webmin1.910_exploit

Webmin 1.910 Remote Code Execution Exploit Description: This repository contains a Python 3 script designed to exploit a remote code execution vulnerability in Webmin version 1.910. The script utilizes the sessionlogin.cgi endpoint to perform authentication and deploy a reverse shell payload,...

PoC-CVE-2019-12840

Exploit for CVE-2019-12840 in Webmin This repository contains a Python script that exploits the CVE-2019-12840 vulnerability in Webmin. Description The script attempts to log in to a Webmin server and then exploit the CVE-2019-12840 vulnerability. The script accepts several command-line arguments...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Command Injection through the Webmin's File Manager feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Command Execution eXploit's C0de POC...

CVE-2021-31762

..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021...

CVE-2019-15107

Unauthenticated RCE via Webmin Backdoor CVE-2019–15107 Summary CVE: CVE-2019–15107 Affected Version: Webmin it will open an shell for you . Note: For versions 1.900–1.920, the “expired password changing” feature must be enabled for the backdoor to trigger. Version 1.890 is vulnerable in its defau...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

CVE-2024-12828-PoC

CVE-2024-12828-PoC Webmin CGI Command Injection Remote Code Execution Vulnerability...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

CVE-2012-2982

CVE-2012-2982 This python script is written for vulnerability in Webmin 1.580, CVE-2012-2982. The vulnerability exists in the /file/show.cgi component and allows an authenticated user, with access to the File Manager Module, to execute arbitrary commands with root privileges. Installation Tested...

CVE-2019-15107_webminRCE

CVE-2019-15107webminRCE unauthorized RcE exploit for webnin 1.920 modified version of https://github.com/jas502n/CVE-2019-15107 POC https://asciinema.org/a/YzMmXQyvZcsBF9OzccXxmHmyQ...

Webmin_CVE-2019-15107

CVE-2019–15107 - Unauthenticated RCE Webmin =1.920 This python script should give you a root shell on Webmin 1.890 Check with nmap: nmap -sC -sV -p 10000 TARGETIP Result: 10000/tcp open http MiniServ 1.890 Webmin httpd How to use this exploit: Step 1: nc -lnvp LPORT Step 2: chmod +x exploit.py...

webmin_docker_and_exp

Docker-webmin-RCE-lab 1. Dockerfiles for CVE-2019-15107webmin RCE recurrence including v1.890 and v1.920. 2. Exp for each version. Build the image First, clone the files Then cd webmin1.890/1.920docker docker build -t hachp1/webmin . Running the container docker run -d -p 10000:10000 hachp1/webmi...

CVE-2026-49243

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...

EUVD-2026-88975

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...

CVE-2026-49243

The web-based system administration tool Webmin is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw in its Configuration module in versions prior to 2.650 . This vulnerability occurs due to the improper neutralization of input during web page generation, allowing an attacker to execute a...

CVE-2026-49243 Webmin: Reflected XSS in the Configuration module

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...