nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Algunas notas de depuración y exploit no ciego Exploit Usa burpsuite, modifica ls / -al en la petición; ten en cuenta que las comillas dobles se reemplazarán por comillas simples root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintos...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Ejecución remota de código sin autenticación | | \ / | | / /| | | || | / / / / / / | | | / || | |/ || / / // || / / root@kitploit: Nexus RCE 3.15.0 Python By jas502n python CVE-2019-7238.py http://10.10.20.166:8081 whoami...

EUVD-2022-1811

Malicious code in bioql PyPI...

GHSA-QF79-34J4-54M6 Typo3 Improper Access Control

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

Typo3 Improper Access Control

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

Design/Logic Flaw

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

CVE-2011-4904

CVE-2011-4904 affects TYPO3 ExtDirect in TYPO3 4.4.x and 4.5.x prior to the fixed releases. The root cause is missing access control on ExtDirect calls, allowing remote attackers to retrieve ExtDirect endpoint services. Public descriptions consistently state that TYPO3 before 4.4.9 and 4.5.x befo...

CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services...

TYPO3 ExtDirect Missing Access Control Vulnerability (TYPO3-CORE-SA-2011-001)

TYPO3 is prone to a missing access control vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...