460 matches found
Avaya Aura Device Services - OS Command Injection
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...
CVE-2023-3722
CVE-2023-3722 CVE-2023-3722 Avaya Aura Device Services の無制限ファイルアップロード RCE の Python POC。 このスクリプトは、PUT リクエストを使用して、8桁のランダム生成ファイル名を持つ PHP ファイルをアップロードします。次に、GET リクエストを行い、そのファイルを取得し、出力を解析してコマンドの出力を得ます。 実行方法 root@kitploit: python3 ./CVE-2023-3722.py example.com:444 --query "id" root@kitploit: python3...
EUVD-2021-12541
Malware in sbrugna...
EUVD-2021-12547
Malware in sbrugna...
EUVD-2018-7488
Malware in sbrugna...
EUVD-2018-7484
Malware in sbrugna...
EUVD-2021-12548
Malware in sbrugna...
EUVD-2018-7487
Malware in sbrugna...
EUVD-2021-12544
Malware in sbrugna...
EUVD-2018-18382
Malware in sbrugna...
EUVD-2020-28163
Malware in sbrugna...
EUVD-2021-12546
Malware in sbrugna...
EUVD-2019-16551
Malware in sbrugna...
EUVD-2018-7482
Malware in sbrugna...
EUVD-2021-12545
Malware in sbrugna...
EUVD-2021-12542
Malware in sbrugna...
EUVD-2020-28169
Malware in sbrugna...
EUVD-2021-12543
Malware in sbrugna...