19 matches found
CVE-2021-41277
CVE-2021-41277 MetaBase Vulnerabilidad de lectura arbitraria de archivos PoC masivo con fofa Declaración Este PoC se utiliza únicamente para detectar si el objetivo tiene la vulnerabilidad. Está estrictamente prohibido su uso para cualquier prueba no autorizada. El autor no asume ninguna...
PoC-Metabase-CVE-2021-41277
Este repositorio no tiene un README...
Metabase - Local File Inclusion
Metabase is an open source data analytics platform. In affected versions a local file inclusion security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not...
CVE-2021-41277
CVE-2021-41277 plugin made for LeakiX...
CVE-2021-41277
CVE-2021-41277 programa simple para explotar metabase instalación gem install httparty gem install colorize gem install timeout ruby CVE.rb...
CVE-2021-41277
CVE-2021-41277 MetaBase Arbitrary File Read A small script I wrote myself; it's not well written, so please feel free to point out any issues. Disclaimer : The techniques provided are for learning and reference testing only. Any direct or indirect losses caused by using the information provided i...
Metabase_Nmap_Script
MetabaseNmapScript It is a nmap script for metabase vulnerability CVE-2021-41277 USAGE -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | State: VULNERABLE Exploitable -- | IDs:...
Metabase-cve-2021-41277
Metabase-cve-2021-41277 Metabase lectura arbitraria de archivos argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u url, --url url URL objetivo, p. ej.:"http://127.0.0.1" -f file, --file file Objetivos en archivo, p. ej.:"ip.txt" Uso ej1:python3 Metabase-cve-2021-41277.py -u...
CVE-2021-41277
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...
Metabase LFI (CVE-2021-41277)
Binary data metabaselficve-2021-41277.nbin...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 MetaBase Arbitrary File Reading This is a...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 Metabase GeoJSON map local fil...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 MetaBase arbitrary file reading vulnerability,...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
Metabase-cve-2021-41277 Metabase 任意文件读取 optional arguments:...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase
CVE-2021-41277 PoC Metabase is an open source data analytics...
CVE-2021-41277
creationtimestamp| type| source ---|---|--- 2021-11-17 22:20:55+00:00| seen| https://t.me/cibsecurity/32567 2021-11-21 13:37:04+00:00| seen| https://t.me/bhhub/640 2021-11-21 13:45:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4802 2021-11-22 13:37:04+00:00| seen|...
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...