CVE-2024-41628

CVE-2024-41628 Simple exploit script developed by Redshift Cyber Security to exploit CVE-2024-41628 ClusterControl LFI vulnerability. The vulnerability affects the CMON API and specifically the RPC and RPC-TLS user interfaces which by default reside on port 9500 and 9501 respectively. Due to...

EUVD-2018-2886

Malware in sbrugna...

Exploit for CVE-2024-41628

CVE-2024-41628 Simple exploit script developed by Redshift Cy...

Severalnines ClusterControl Cross-Site Scripting Vulnerability

Severalnines ClusterControl is an open source database management system. The system can be used to deploy , manage , monitor and scale the database . A cross-site scripting vulnerability exists in versions prior to Severalnines ClusterControl 1.6.0-4699. A remote attacker can exploit this...

Severalnines ClusterControl Detection

Detection of Severalnines ClusterControl. The script sends a connection request to the server and attempts to detect Severalnines ClusterControl and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

Cross site scripting

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

CVE-2018-10817

CVE-2018-10817 affects Severalnines ClusterControl: a cross-site scripting (XSS) vulnerability in the web interface present in versions prior to 1.6.0-4699. Remote attackers could inject arbitrary scripts/HTML. Exploitation details and fixes beyond this are not specified in the provided documents...

CVE-2018-10817: Improper Neutralization of Input During Web Page Generation

Severalnines ClusterControl before 1.6.0-4699 allows XSS...

PT-2018-10125

Name of the Vulnerable Software and Affected Versions Severalnines ClusterControl versions prior to 1.6.0-4699 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal use...