Cobbler - Authentication Bypass

Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ and possibly even older versions, may be vulnerable to an authentication bypass vulnerability in XMLRPC API /cobblerapi that can result in privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting...

CVE-2024-47533-PoC

CVE-2024-47533 – Cobbler XMLRPC प्रमाणीकरण बायपास → रिवर्स शेल अनप्रमाणित RCE 📌 सारांश यह रिपॉजिटरी CVE-2024-47533 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट है, जो कोबलर के XMLRPC API में एक महत्वपूर्ण प्रमाणीकरण बायपास है, जो अनप्रमाणित रिमोट कोड निष्पादन RCE की ओर ले जाता है। यह एक्सप्लॉइट...

SUSE SLES15: Multi-Linux-Manager-Server-SLE-release / mgradm / etc (SUSE-SU-2025:3839-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3839-1 advisory. Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-imag...

CVE-2025-69691: Improper Access Control

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...

SUSE-SU-2025:3839-1 Security update 5.1.1 for Multi-Linux Manager Server

This update fixes the following issues: Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-image was updated from version 5.1.7 to 5.1.10: - CVE-2025-53192: Do not use apache-commons-ognl but its...

EUVD-2014-2073

Malware in sbrugna...

EUVD-2014-2074

Malware in sbrugna...

EUVD-2015-0297

Malware in sbrugna...

EUVD-2014-2075

Malware in sbrugna...

EUVD-2015-2280

Malware in sbrugna...

EUVD-2022-3869

Malicious code in bioql PyPI...

EUVD-2021-8259

Malicious code in bioql PyPI...

PT-2025-54869

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

CVE-2021-20850

PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series End-of-Life, EOL allows a remote attacker to execute an arbitrary OS command via unspecified vectors...

WordPress Pingback Checker Server-Side Request Forgery

WordPress versions prior to 3.5.1 have a server-side request forgery issue that can be leveraged by the pingback checker tool. ============================================================================================================================================= | Title : WordPress before...

Linux Distros Unpatched Vulnerability : CVE-2018-1000226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable...

PT-2024-41013

Name of the Vulnerable Software and Affected Versions No vulnerable software versions are specified in the provided description. Description The description does not provide information about a specific issue. It appears to be a list of updates for various software components, including...

RHEL 8 : cobbler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cobbler: XMLRPC API endpoints are not correctly validating security tokens CVE-2018-1000226 - Cobbler...

spacewalk-backend spacewalk-java security update

spacewalk-backend 2.10.28-1.0.13 - Fix HTTP 500 and ORA-01830 on client scap report Orabug: 34823889 2.10.28-1.0.12 - Handle remote commands that return no output. Orabug: 32530545 2.10.28-1.0.11 - Make spacewalk-debug copy symlink target instead of the symlink itself. Orabug: 32514543...

Path traversal

A Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files...