Lucene search
+L

7 matches found

NVD
NVD
added 2022/06/09 5:15 p.m.25 views

CVE-2019-25066

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

8.8CVSS0.05397EPSS
SaveExploits2References3
OSV
OSV
added 2022/06/09 5:15 p.m.22 views

CVE-2019-25066

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

8.8CVSS7.1AI score
SaveExploits0References3
Prion
Prion
added 2022/06/09 5:15 p.m.24 views

Code injection

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

6.5CVSS8.8AI score0.05397EPSS
SaveExploits2References3Affected Software1
CNNVD
CNNVD
added 2022/06/09 12:00 a.m.11 views

ajenti 操作系统命令注入漏洞

ajenti is a Linux and BSD modular server management panel from ajenti open source. A security vulnerability exists in ajenti version 2.1.31, which stems from a problem with the component API. An attacker can exploit the vulnerability to achieve privilege escalation...

8.8CVSS7.8AI score0.05397EPSS
SaveExploits2References4
zdt
zdt
added 2019/12/03 12:00 a.m.211 views

Ajenti 2.1.31 Command Injection Exploit

This Metasploit module exploits a command injection in Ajenti version 2.1.31. By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned. This module requires Metasploit: https://metasploit.com/download Current source:...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/12/02 12:00 a.m.176 views

Ajenti 2.1.31 Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ajenti auth username Command Injection', 'Description' = %q This module exploits a command injection in Ajenti == 2.1.31. By injecting a command...

7.4AI score
SaveExploits0
zdt
zdt
added 2019/10/15 12:00 a.m.104 views

Ajenti 2.1.31 - Remote Code Execution Exploit

Exploit for python platform in category web applications Title: Ajenti 2.1.31 - Remote Code Execution Author: Jeremy Brown Software Link: https://github.com/ajenti/ajenti CVE: N/A Tested on: Ubuntu Linux !/usr/bin/python ajentix.py Ajenti Remote Command Execution Exploit ------- Details -------...

7.4AI score
SaveExploits0
Rows per page
Query Builder