Apache Couchdb Erlang RCE

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. Module Options msf use exploit/multi/http/apachecouchdberlangrce msf exploitapachecouchdberlangrce show targets ...targets... msf...

Exploit for SQL Injection in Zabbix

This is a comprehensive and well-structured vulnerability hub repository. Here's a concise analysis of the provided information: Classification: It is an offensive tool for various vulnerability exploitation and testing purposes. CVE IDs: The repository contains references to several CVE IDs,...

PT-2022-13442 · Apache · Apache Couchdb

Name of the Vulnerable Software and Affected Versions: Apache CouchDB affected versions not specified Description: The issue is related to an insecure default initialization of resources in Apache CouchDB, which could allow an attacker to elevate their privileges to the administrator level...

PT-2022-37630 · Undefined · Undefined

CVE Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-08-25 Apache CouchDB содержит небезопасную инициализацию ресурсов по умолчанию, которая может позволить злоумышленнику повысить свои привилегии до уровня администратора...

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges...

Command Execution Vulnerability in Apache CouchDB

Apache CouchDB is the United States Apache Apache Foundation's use of Erlang development of a document-oriented database system. Apache CouchDB suffers from a command execution vulnerability that can be exploited by an attacker to gain administrator privileges...

Apache CouchDB Remote Code Execution (CVE-2022-24706)

A remote code execution vulnerability exists in Apache CouchDB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

vulhub

This repository is an offensive tool for web application security training and testing. It is a collection of vulnerable web applications and tools for testing and training purposes. The repository contains a variety of vulnerable applications, including web servers, databases, and other web-base...

GHSA-JRJR-7RF4-3WQH Password stored in plain text by Jenkins couchdb-statistics Plugin

Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration file org.jenkinsci.plugins.couchstats.CouchStatsConfig.xml on the Jenkins controller as part of its configuration. This password can be viewed by users with access to the Jenkins...

Password stored in plain text by Jenkins couchdb-statistics Plugin

Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration file org.jenkinsci.plugins.couchstats.CouchStatsConfig.xml on the Jenkins controller as part of its configuration. This password can be viewed by users with access to the Jenkins...

CVE-2018-11769

CouchDB administrative users before 2.2.0 can configure the database server via HTTPS. Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's...

Exploit for Insecure Default Initialization of Resource in Apache Couchdb

Apache CouchDB 3.2.1 - Remote Code Execution RCE CVE-2022-24...

The vulnerability of the CouchDB database management system, related to insecure resource initialization, allows attackers to escalate their privileges.

The vulnerability of the CouchDB database management system is related to the insecure initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

com.fmpwizard:lift-named-comet_2.8.2 (=0.3), net.liftweb:lift-couchdb_2.8.2 (>=2.4 <=2.4-RC1) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.2 (>=2.4 <=2.4-RC1)

net.liftweb:lift-webkit2.8.2 MAVEN version =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4-RC1 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

net.liftweb:lift-couchdb_2.7.7 (>=2.1 <=2.2-RC6), net.liftweb:lift-facebook_2.7.7 (>=2.1 <=2.2-RC6) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (>=2.1 <=2.2-RC6)

net.liftweb:lift-webkit2.7.7 MAVEN version =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.2, =2.1, =2.1, =2.2-RC6 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

Apache CouchDB < 3.2.2 Remote Privilege Escalation

According to its banner, the version of CouchDB running on the remote host is prior to 3.2.2 It is, therefore, potentially affected by a remote privilege escalation vulnerability. An attacker can access an improperly secured default installation without authenticating and gain admin privileges...

Apache CouchDB 3.2.1 - Remote Code Execution Exploit

Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name couchdb at" CVE:...

Apache CouchDB 3.2.1 Remote Code Execution

Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Date: 2022-01-21 Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name...

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Date: 2022-01-21 Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name...

Apache CouchDB < 3.2.2 Privilege Escalation Vulnerability - Windows - Version Check

Apache CouchDB is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:couchdb";...