ALCASAR Host Header RCE

Exploits ALCASAR command injection via a crafted Host header on /alcasar/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host header command injection RCE — execute session.""" from future import annotations import re from kittysploit import...

ALCASAR - Host Header RCE Detection

Detects ALCASAR RCE by injecting mailto:...;id; into the Host header on /alcasar/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host-header command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

EUVD-2024-37251

Malicious code in bioql PyPI...

EUVD-2024-37252

Malicious code in bioql PyPI...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

PT-2024-27930 · Alcasar · Alcasar

Name of the Vulnerable Software and Affected Versions: ALCASAR versions prior to 3.6.1 Description: The issue allows remote code execution in the email registration back.php file. Recommendations: For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue...

CVE-2024-38294

ALCASAR before 3.6.1 contains a remote code execution vulnerability via the file email_registration_back.php. Affected product: Alcasar versions prior to 3.6.1. Impact is described as high/total in the CVE, with no exploit specifics provided in the supplied documents. Root cause details are not d...

CVE-2024-38294

ALCASAR before 3.6.1 allows emailregistrationback.php remote code execution...

ALCASAR Security Vulnerabilities

ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to remote code execution attacks...

ALCASAR Security Vulnerabilities

ALCASAR is a free open source project from ALCASAR Open Source for managing Internet access on public, business or home networks. A security vulnerability exists in ALCASAR versions prior to 3.6.1 that stems from vulnerability to cross-site request forgery and remote code execution attacks...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38295

ALCASAR before 3.6.1 allows stillconnected.php remote code execution...

CVE-2024-38293

Versions of ALCASAR prior to 3.6.1 are vulnerable to Cross-Site Request Forgery (CSRF) and remote code execution (RCE) . The flaw specifically exists within the activity.php file. To resolve this issue, users are recommended to update to ALCASAR version 3.6.1 or later. No information regarding sp...