Mattermost security vulnerabilities

Mattermost is an open-source collaboration platform developed by the American company Mattermost. There is a security vulnerability in Mattermost, which stems from the failure to clean up post content controlled by users. This vulnerability could allow attackers to manipulate administrator...

EUVD-2014-0190

Malware in sbrugna...

EUVD-2014-0189

Malware in sbrugna...

Hawt.io admin terminal command execution vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A security vulnerability exists in the admin terminal in Hawt.io, which is caused by the program failing to require authentication. A remote attacker can exploit this vulnerability to execute...

Hawt.io admin terminal cross-site request forgery vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A cross-site request forgery vulnerability exists in the admin terminal in Hawt.io. A remote attacker could use this vulnerability to execute commands on the Karaf server...

Arbitrary Command Execution

hawtio-karaf-terminal is vulnerable to arbitrary command execution. Attackers can execute arbitrary commands through the admin terminal as it doesn't require authentication...

Authentication flaw

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0121

CVE-2014-0121 affects Hawt.io: the admin terminal does not require authentication, allowing remote attackers to execute arbitrary commands via the k parameter. Documents consistently describe an authentication bypass in Hawt.io’s admin terminal, enabling command execution with potential high impa...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

PT-2017-5775

Name of the Vulnerable Software and Affected Versions: Hawt.io affected versions not specified Description: A cross-site request forgery CSRF issue in the admin terminal of Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf...

PT-2017-5776

Name of the Vulnerable Software and Affected Versions: Hawt.io affected versions not specified Description: The issue concerns the admin terminal in Hawt.io, which does not require authentication. This allows remote attackers to execute arbitrary commands via the k parameter. Recommendations: At...

CVE-2014-0121: Improper Authentication

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0120: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...