119 matches found
CVE-2022-24707
PoC for CVE-2022-24707 SQL Injection Vulnerability on Puncher plugin. A POST request can be crafted to exploit SQL Injection and leak database contents. This is tested on Anuko Time Tracker 1.20.0.5640. python3 exploit.py --help usage: exploit.py -h --username USERNAME --password PASSWORD --host...
CVE-2022-24707_AnukoTimeTracker_Version-1.20.0_POC
CVE-2022-24707 Anuko Time Tracker SQL Injection Exploit A security assessment tool that demonstrates a SQL injection vulnerability in Anuko Time Tracker's Version 1.20.0 puncher feature. This tool helps to Dump the whole ttusers Database and revels every single entry, If used as per following the...
Anuko Time Tracker CVE-2022-24707 puncher SQLi
CVE-2022-24707 Anuko = 1.20.0.5640: authenticated SQLi in puncher.php date parameter writes ttusers credentials into the entry note field. !/usr/bin/env python3 -- coding: utf-8 -- """Anuko Time Tracker CVE-2022-24707 puncher date SQLi credential extract.""" from future import annotations import ...
Anuko Time Tracker CVE-2022-24707 Detect
Fingerprints Anuko Time Tracker login/register surface. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprints Anuko Time Tracker login/register surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Anuko Time...
Exploit for SQL Injection in Anuko Time_Tracker
CVE-2022-24707 - Anuko Time Tracker SQL Injection Authenticat...
Anuko Time Tracker 1.20.0.5640 SQL Injection
Anuko Time Tracker versions prior to 1.20.0.5642 contain an authenticated SQL injection vulnerability in the Puncher plugin. A proof of concept is provided to inject a scalar SQL query through the date parameter and read its result. https://packetstorm.news/download/237259...
EUVD-2020-7266
Malware in sbrugna...
EUVD-2021-16061
Malware in sbrugna...
EUVD-2020-19933
Malware in sbrugna...
EUVD-2022-29574
Malicious code in bioql PyPI...
EUVD-2021-30720
Malicious code in bioql PyPI...
EUVD-2021-28256
Malicious code in bioql PyPI...
EUVD-2021-8676
Malicious code in bioql PyPI...
EUVD-2022-29573
Malicious code in bioql PyPI...
CVE-2023-32308
anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prior to 1.22.11.5781. This was happening because of a coding error after validating parameters in POST requests. There was no check for error...
CVE-2022-24708
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was not escaping primary group name for display. Because of that, it was possible for a logged in user to modify primary group name with element...
CVE-2021-43851
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker version 1.19.33.5606 and prior due to not properly checking of the "group" and "status" parameters in POST requests. Group parameter is...
CVE-2021-29436
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery CSRF vulnerability existed. The nature of CSRF is that a logged on user may be tricked by social engineering to click on an...
CVE-2021-21352
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version 1.19.24.5415 tokens used in password reset feature in Time Tracker are based on system time and, therefore, are predictable. This opens a window for brute force attacks to guess...