CVE-2021-40870

CVE-2021-40870 Exploitation Aviatrix Controller 6.x 버전 중 6.5-1804.1922 이전 버전에서 문제가 발견되었습니다. 위험한 유형의 파일을 인증 없이 업로드할 수 있어, 디렉터리 트래버설을 통해 인증되지 않은 사용자가 임의 코드를 실행할 수 있습니다. 설치해야 할 모듈 이 프로젝트를 실행하려면 Python에 다음 모듈을 추가해야 합니다. requests urllib3 사용법 이 프로젝트를 실행하려면 다음을 수행하세요. python3 poc.py https://site.com/ UR...

CVE-2024-50603

CVE-2024-50603: Aviatrix Controller の未認証コマンドインジェクション CVEHunter は、非同期パフォーマンスを備えた CVE-2024-50603 の脆弱性検出および悪用ツールです。 インストール git clone https://github.com/th3gokul/CVE-2024-50603.git cd CVE-2024-50603 pip install -r requirements.txt python3 cvehunter.py --help@RevoltSecurities python3 cvehunter.py -h...

Aviatrix Controller Unrestricted Upload of File (CVE-2021-40870)

While the Aviatrix UI requires authentication, many API calls do not enforce a check for authentication. Some of these API calls allow an unauthenticated attacker to upload arbitrary files, including .php scripts, to the filesystem. These uploaded scripts will be processed by the web frontend,...

Aviatrix Controllers < 7.1.4191 / 7.2 < 7.2.4996 RCE

The version of Aviatrix Controller installed on the remote host is prior to 7.1.4191 for 7.1.x or prior to 7.2.4996 for 7.2.x. It is, therefore, affected by an OS command injection vulnerability caused by improper neutralization of special elements in API input. An unauthenticated attacker can se...

EUVD-2020-19098

Malware in sbrugna...

EUVD-2020-5670

Malware in sbrugna...

EUVD-2020-5669

Malware in sbrugna...

EUVD-2020-19095

Malware in sbrugna...

EUVD-2020-19094

Malware in sbrugna...

EUVD-2020-5666

Malware in sbrugna...

EUVD-2020-20076

Malware in sbrugna...

EUVD-2020-19093

Malware in sbrugna...

EUVD-2020-5667

Malware in sbrugna...

EUVD-2020-19097

Malware in sbrugna...

EUVD-2020-5668

Malware in sbrugna...

EUVD-2020-19096

Malware in sbrugna...

EUVD-2025-18917

Malicious code in bioql PyPI...

EUVD-2025-18898

Malicious code in bioql PyPI...

CVE-2025-2171

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN...

CVE-2025-2172

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames...