nosqli-flintcms

nosqli-flintcms Blind noSQL injection case study lab based on CVE-2018-3783 privilege escalation on flintcms 1.1.9. The vulnerability was originally discovered by Benoit Côté-Jodoin. You can read original report on HackerOne. Prerequisites root@kitploit: docker-compose Limitation : We removed...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 익스플로잇 ⚠️ 면책 조항 - 교육 목적으로만 사용 이 익스플로잇은 공인된 침투 테스트 및 교육 목적으로만 사용됩니다. 컴퓨터 시스템에 대한 무단 액세스는 불법입니다. 저자는 오용에 대해 책임을 지지 않습니다. 📋 개요 CVE-2021-22911 은 Rocket.Chat에서 인증되지 않은 NoSQL 인젝션 취약점으로, 원격 코드 실행RCE으로 이어집니다. CVSS 점수: 9.8 치명적 영향 받는 버전: Rocket.Chat 3.12.7 공격 벡터: 네트워크 / 인증되지 않음 영향:...

GHSA-JHQ3-57XH-6643 Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Privilege Escalation due to Blind NoSQL Injection

Overview Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later. References - HackerOne Report - GitHub Advisory...