449 matches found
Accellion FTA - getStatus Command Injection (CVE-2015-2857)
Exploits CVE-2015-2857 by injecting OS commands via oauthtoken on /tws/getStatus. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA getStatus oauthtoken RCE CVE-2015-2857 — opens execute session.""" import re from urllib.parse import quote from...
Accellion FTA - getStatus RCE Detection (CVE-2015-2857)
Detects CVE-2015-2857 by POSTing oauthtoken=';echo ' to /tws/getStatus and matching Success resultmsg. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA oauthtoken command injection CVE-2015-2857.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Accellion FTA - statecode File Read (CVE-2015-2856)
Reads arbitrary files via CVE-2015-2856 statecode cookie LFI on /intermediatelogin.html. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA statecode cookie file disclosure CVE-2015-2856.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...
Accellion FTA - statecode LFI Detection (CVE-2015-2856)
Detects CVE-2015-2856 by requesting /intermediatelogin.html with Cookie statecode=../../../../../etc/passwd%00. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA statecode cookie file disclosure CVE-2015-2856.""" import re from kittysploit import from lib.protocols.http.httpclient import...
Accellion - Detect
Dectection of Accellion File Transfer Appliance. !/usr/bin/env python3 -- coding: utf-8 -- """Dectection of Accellion File Transfer Appliance.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Accellion - Detect',...
CVE-2021-27104
Accellion FTA 912370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA912380 and later...
CVE-2021-27102
Accellion FTA 912411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA912416 and later...
CVE-2021-27731
Accellion FTA 912432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA912444 and later...
CVE-2021-27103
Accellion FTA 912411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA912416 and later...
CVE-2021-31585
Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access...
CVE-2021-31586
Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...
EUVD-2019-15197
Malware in sbrugna...
EUVD-2016-3435
Malware in sbrugna...
EUVD-2016-3437
Malware in sbrugna...
EUVD-2009-4611
Malware in sbrugna...
EUVD-2009-4609
Malware in sbrugna...
EUVD-2021-18480
Malware in sbrugna...
EUVD-2021-14472
Malware in sbrugna...