ALCASAR Host Header RCE

Exploits ALCASAR command injection via a crafted Host header on /alcasar/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host header command injection RCE — execute session.""" from future import annotations import re from kittysploit import...

ALCASAR - Host Header RCE Detection

Detects ALCASAR RCE by injecting mailto:...;id; into the Host header on /alcasar/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host-header command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

EUVD-2024-37251

Malicious code in bioql PyPI...

EUVD-2024-37252

Malicious code in bioql PyPI...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

PT-2024-27930 · Alcasar · Alcasar

Name of the Vulnerable Software and Affected Versions: ALCASAR versions prior to 3.6.1 Description: The issue allows remote code execution in the email registration back.php file. Recommendations: For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue...

CVE-2024-38294

ALCASAR before 3.6.1 contains a remote code execution vulnerability via the file email_registration_back.php. Affected product: Alcasar versions prior to 3.6.1. Impact is described as high/total in the CVE, with no exploit specifics provided in the supplied documents. Root cause details are not d...

CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

ALCASAR Security Vulnerabilities

ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to remote code execution attacks...

CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

CVE-2024-38294: Undefined Security Weakness

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

ALCASAR Security Vulnerabilities

ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to cross-site request forgery and remote code execution attacks...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

PT-2024-27931

Name of the Vulnerable Software and Affected Versions ALCASAR versions prior to 3.6.1 Description The issue allows remote code execution via the still connected.php file. Recommendations For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...