Exploit for CVE-2021-22146

cve-2021-22146 I found during a internal pentest...

CVE-2020-19907

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service...

CVE-2020-19907

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service...

Command injection

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service...

CVE-2020-19907

The CVE-2020-19907 entry describes a command-injection vulnerability in the sandcat plugin of Caldera versions 2.3.1 and earlier . The root cause is not elaborated beyond the vulnerable plugin allowing an authenticated attacker to execute arbitrary commands or services. Impact is scoped to an aut...

CVE-2020-19907

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service...

Caldera 操作系统命令注入漏洞

Caldera is a suite of software from the French company Caldera that enables color management, imaging and processing solutions for printer devices. A security vulnerability exists in Caldera versions 2.3.1 and earlier, where an authenticated attacker executes any command or service...

PT-2021-10417 · Sandcat +1 · Sandcat +1

Name of the Vulnerable Software and Affected Versions: Caldera versions 2.3.1 and earlier Description: A command injection issue in the sandcat plugin allows authenticated attackers to execute any command or service. Recommendations: For Caldera versions 2.3.1 and earlier, at the moment, there is...

Caldera Cross-Site Scripting Vulnerability

Caldera is a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices. A cross-site scripting vulnerability exists in Caldera version 2.7.0. The vulnerability stems from a lack of proper validation of client-side data b...

CVE-2020-14462

CALDERA 2.7.0 allows XSS via the Operation Name box...

CVE-2020-14462

CALDERA 2.7.0 allows XSS via the Operation Name box...

Cross site scripting

CALDERA 2.7.0 allows XSS via the Operation Name box...

CVE-2020-14462

CVE-2020-14462 concerns CALDERA 2.7.0 with a cross-site scripting (XSS) vulnerability in the WEB application, arising from lack of proper validation of client-side data in the Operation Name box. Multiple connected sources (CNVD-2021-22479, RH: Red Hat, NVD, OSV, CNVD) describe it as a Caldera XS...

CVE-2020-14462

CALDERA 2.7.0 allows XSS via the Operation Name box...

The vulnerability of the auth_svc function in the Caldera automated system for emulating hacker actions allows a hacker to increase their privileges.

The vulnerability of the authsvc function in the Caldera Calibur emulation system is related to errors in processing the “localhost” string in the HTTP header of the host. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

UPDATE: MITRE CALDERA 2.6.5

MITRE CALDERA 2.6.5 is now available! My last post about CALDERA from MITRE was about MITRE CALDERA 2.5.1 and as you remember, this awesome adversary emulation system was listed in my older post titled – List of Adversary Emulation Tools. This release includes a new plugin – Training. It has been...

Caldera Access Control Error Vulnerability

Caldera is a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices. An access control error vulnerability exists in authsvc in versions of Caldera prior to 2.6.5, which can be exploited by an attacker to bypass...

CVE-2020-10807

authsvc in Caldera before 2.6.5 allows authentication bypass for REST API requests via a forged "localhost" string in the HTTP Host header...

Authentication flaw

authsvc in Caldera before 2.6.5 allows authentication bypass for REST API requests via a forged "localhost" string in the HTTP Host header...

CVE-2020-10807

CVE-2020-10807 concerns Caldera’s auth_svc before 2.6.5, where authentication can be bypassed for REST API requests by forging the HTTP Host header to include a localhost string. The issue is mitigated by upgrading to Caldera 2.6.5 or later, which addresses the authentication bypass vulnerability...