14 matches found
CVE-2023-30258-Exploit-For-Magnus-Billing-System
Este repositorio no tiene un README...
CVE-2023-30258-setup
CVE-2023-30258-setup...
Room-Walkthrough-Billing
🧠 房间通关：Billing 作者： Aditya Bhatt | 开源贡献者 📦 概览 在本攻略中，我们将全力攻破 Billing 房间 ，展示一个脆弱的 MagnusBilling 实例、一个诱人的未授权 RCE（CVE-2023-30258）以及一个喊着“提权我吧”的 fail2ban sudo 配置错误。 这个房间完美融合了自动化利用与创造性权限提升，让我们亲手体验隐藏在 VoIP 计费软件中的真实漏洞。 我们将从初始侦察 一路走到Root Shell ，附带完整 PoC、评论和 🗿 风格。 🌐 第一步：枚举阶段 🏁 初始着陆 部署机器后，首先映入眼帘的就像一个配置错误的防火墙：...
Tryhackme_Billing
TryhackmeBilling Billing CTF 机器CVE-2023-30258远程代码执行...
CVE-2023-30258
This repository does not have a README...
THM-Billing
🛡️ TryHackMe: Billing Linux Privilege Escalation | Web Ex...
Exploit for OS Command Injection in Magnussolution Magnusbilling
magnusbilling7.3.0RCECVE-2023-30258 There is a remote cod...
CVE-2023-30258
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request...
📄 MagnusBilling 6.x / 7.x Command Injection
MagnusBilling versions 6.x and 7.x suffer from an unauthenticated remote command injection vulnerability. Exploit Title: MagnusBilling 6.x and 7.x Unauthenticated Remote Command Injection Vulnerability Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage:...
Exploit for OS Command Injection in Magnussolution Magnusbilling
CVE-2023-30258-RCE-POC POC for CVE-2023-30258-RCE by n0o0b...
CVE-2023-30258
creationtimestamp| type| source ---|---|--- 2023-11-03 20:01:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magnusbillingunauthrcecve202330258.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
CVE-2023-30258
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request...
CVE-2023-30258
CVE-2023-30258 affects MagnusBilling magnusbilling 6.x and 7.x with an unauthenticated remote command injection in lib/icepay/icepay.php via the democ parameter. An attacker can craft a request to run arbitrary OS commands, enabling full system compromise as indicated by connected templates and e...
