detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Обзор CVE-2019-15107 Webmin — это веб-интерфейс для системного администрирования Unix. С помощью любого веб-браузера можно настраивать учетные записи пользователей, Apache, DNS, общий доступ к файлам и многое другое. 10 августа 2019 года турецкий исследователь...

Arbitrary-File-Read-CVE-2024-24919

任意ファイル読み取り CVE-2024-24919 SIEMで受信したアラートは以下の通りです。 まず、CVE-2024-24919とは何でしょうか？以下はNISTのウェブサイトに掲載されている説明です。 さらに調査を進めると、CVE-2024-24919はパストラバーサル攻撃であり、「/etc/passwd」ディレクトリへのリクエストが行われた理由が説明されます。 「/etc/passwd」ディレクトリには、ユーザーのユーザー名、ユーザーID（UID）、グループID（GID）、ホームディレクトリ、ログインシェルなど、ユーザーアカウント情報が格納されています。...

CVE-2020-11651

CVE-2020-11651 Скрипт, который эксплуатирует уязвимости SaltStack CVE-2020-11651 и CVE-2020-11652 для добавления новых пользователей на уязвимый Salt master путем инъекции записей в /etc/passwd и /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04...

CVE-2024-24919

CVE-2024-24919 шаблон nuclei для CVE-2024-24919 Этот шаблон поможет обнаружить описанную уязвимость, проверяя, не раскрывает ли система содержимое файла /etc/shadow...

cve-2021-45043

cve-2021-45043 HD-Network 실시간 모니터링 시스템 2.0은 /language/lang sLanguage 매개변수를 통해 ../ 디렉터리 트래버설을 허용하여 /etc/shadow를 읽을 수 있습니다. 최초 게시물 https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f Burp를 통한 익스플로잇 GET /language/lang HTTP/1.1 Host: IP.target Cookie:...

MegaHiDocker

MegaHiDocker 이 프로젝트는 유사한 취약점 코드CVE-2020-35191를 가진 일부 도커 컨테이너를 대상으로 하지만, 이번에는 다른 컨테이너에서 이용됩니다. = Description.txt 파일을 읽어주세요 요구 사항: 1. Linux에 Docker를 설치하고 Python 3.X용 subprocess 모듈을 설치해야 합니다. 2. 컨테이너를 pull한 후 이 코드를 실행하세요 예: docker pull 취약점의 영향: 1.CVSS: 9.8 Critical 2.코드 실행 영향: True 3.서비스 거부 영향: True...

CVE-2020-25223

CVE-2020-25223 영향을 받는 Sophos UTM을 대상으로 CVE-2020-25223을 테스트하기 위한 PoC 스크립트입니다. IP 주소가 주어지면 스크립트는 해당 장치의 /etc/shadow 파일 사본을 다운로드하려고 시도합니다. 원본 연구: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Эксплойты для дампа конфигураций Cisco RV320 и получения RCE Реализации эксплойтов CVE-2019-1652 и CVE-2019-1653, раскрытых Red Team Pentesting GmbH. Я тестировал это только на RV320, но согласно уведомлению Cisco, RV325 также уязвим. Следующие запросы...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI root@kitploit: ------------------------------------------------------------------------------------------------------------- ------------- 0day：TELEFONE IP TIP200/200 LITE & TIP 300 | 本地文件包含 | ---------------------------- ------------------------------- P0c...

CVE-2024-24919

チェックポイント: CVE-2024-24919 CVEを実行 root@kitploit: nuclei -list chick.txt -t CVE-2024-24919.yaml をターゲットIPアドレスに置き換えると、このコマンドは/etc/shadowファイル（パスワードハッシュを含む）へのアクセスを試みます。 root@kitploit: curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H 'Content-Length: 39' \ -H 'Connection: keep-alive' ...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 테스트 프로그램 webmin의 원격 명령 실행 취약점으로, 대략 perl의 qx/…/로 인해 명령이 실행됩니다. 악용에는 특정 조건이 필요하며, 재현할 때 간단히 GUI 기반 익스플로잇 프로그램을 작성했습니다. 주의할 점은, user 값이 가짜 사용자여야 하며, 실제 root로 테스트하면 성공하지 않습니다. 전송된 사용자 매개변수의 값이 알려진 Linux 사용자가 아닌 경우에만 /etc/shadow를 수정하는 부분으로 진입하여 명령 삽입 취약점이 트리거됩니다. 리버스 셸을...

EUVD-2026-54398

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

K000162205: Linux kernel vulnerability CVE-2026-46333

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'getdumpable' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and makes no sens...

CVE-2026-47833 - Symlink vulnerability in setupBpmLogs allows container-to-host privilege escalation via /etc/shadow | Cloud Foundry

Medium CVSS score: 6.8 Medium CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/S:U/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N Vendor Cloud Foundry Foundation Versions Affected Severity is Medium unless otherwise noted. bpm-release – All versions prior to v1.4.30 Description setupBpmLogs follows symlink for bpm.log open and...

kernel: Read root-owned files as an unprivileged user

A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully...

CVE-2026-31927

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files e.g., /etc/shadow, enabling unauthorized SSH access when combined with debug‑setting changes...

CVE-2019-25610

NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to...

EUVD-2026-12494

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

CVE-2026-29516 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

EUVD-2026-9514

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...