Mattermost 安全漏洞

Mattermost is an open-source collaboration platform developed by the American company Mattermost. There is a security vulnerability in Mattermost, which stems from the failure to clean up post content controlled by users. This vulnerability could allow attackers to manipulate administrator...

EUVD-2014-0190

Malware in sbrugna...

EUVD-2014-0189

Malware in sbrugna...

Hawt.io admin terminal cross-site request forgery vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A cross-site request forgery vulnerability exists in the admin terminal in Hawt.io. A remote attacker could use this vulnerability to execute commands on the Karaf server...

Hawt.io admin terminal command execution vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A security vulnerability exists in the admin terminal in Hawt.io, which is caused by the program failing to require authentication. A remote attacker can exploit this vulnerability to execute...

Arbitrary Command Execution

hawtio-karaf-terminal is vulnerable to arbitrary command execution. Attackers can execute arbitrary commands through the admin terminal as it doesn't require authentication...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

Authentication flaw

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2014-0120

Cross-site request forgery CSRF vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."...

CVE-2014-0121

CVE-2014-0121 affects Hawt.io: the admin terminal does not require authentication, allowing remote attackers to execute arbitrary commands via the k parameter. Documents consistently describe an authentication bypass in Hawt.io’s admin terminal, enabling command execution with potential high impa...