443 matches found
EyesOfNetwork - Hardcoded API Key & SQL Injection
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php. id: CVE-2020-8656 info: name:...
EyesOfNetwork - Hardcoded API Key
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...
EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution
EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...
CVE-2021-27513
CVE-2021-27513 ITSMBrokencontrol Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution Date: 10/01/2021 Exploit Author: Ariane.Blow Vendor Homepage: https://www.eyesofnetwork.com/en Software Link: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x8664-bin.iso Version: 5.3-10...
CVE-2021-27513-CVE-2021-27514
exploit-eyesofnetwork Version 5.3.5 up to 5.3.10 CVE-2021-27513 / CVE-2021-27514 The brute-forcing can take a very long time on non production environement cause "sessionid" is created at every login but every sessionid generated by the app are valide for the PoC i deployed an EyesOfNetwork...
EyesOfNetwork - eonapi getApiKey SQLi Detection (CVE-2020-8656)
Detects CVE-2020-8656 by injecting into /eonapi/getApiKey username parameter and looking for EONAPIKEY in a 200 JSON response. !/usr/bin/env python3 -- coding: utf-8 -- """EyesOfNetwork eonapi getApiKey SQL injection CVE-2020-8656.""" import re from kittysploit import from...
EyesOfNetwork - user_id Cookie Blind SQLi Detection (CVE-2020-9465)
Detects CVE-2020-9465 by sending two userid cookies with RLIKE CASE WHEN payloads: false condition yields HTTP 500, true condition yields HTTP 302. !/usr/bin/env python3 -- coding: utf-8 -- """EyesOfNetwork userid cookie blind SQL injection CVE-2020-9465.""" from kittysploit import from...
EyesOfNetwork Detect
EyesOfNetwork detection !/usr/bin/env python3 -- coding: utf-8 -- """EyesOfNetwork detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EyesOfNetwork Detect', 'description': 'EyesOfNetwork detection', 'author':...
EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution Detection
EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...
VulnCheck KEV: CVE-2020-8656
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php...
EUVD-2017-6461
Malware in sbrugna...
EUVD-2017-5630
Malware in sbrugna...
EUVD-2017-5907
Malware in sbrugna...
EUVD-2017-6459
Malware in sbrugna...
EUVD-2017-7349
Malware in sbrugna...
EUVD-2017-5295
Malware in sbrugna...
EUVD-2017-1380
Malware in sbrugna...
EUVD-2017-5631
Malware in sbrugna...