Lucene search
+L

85 matches found

Kitploit
Kitploit
added 2026/09/20 2:01 p.m.10 views

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 Description Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs...

10CVSS7.1AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/20 11:57 a.m.9 views

CVE-2021-41277

CVE-2021-41277 Metabase GeoJSON map local file inclusion Version: x.40.0-x.40.4 Usage : root@kitploit: chmod -x CVE-2021-41277.sh ./CVE-2021-41277.sh http://ip:port/ /etc/passwd References https://vulners.com/cve/CVE-2021-41277...

10CVSS7.4AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/19 10:43 a.m.10 views

CVE-2021-41277

CVE-2021-41277 Usage 1. show help info root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u strin...

10CVSS7.2AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.11 views

Metabase_Nmap_Script

MetabaseNmapScript Es un script de nmap para la vulnerabilidad de Metabase CVE-2021-41277 USO -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | Estado: VULNERABLE Explotable -- | IDs:...

10CVSS7AI score0.97178EPSS
SaveExploits5
NVD
NVD
added 2026/09/16 9:17 p.m.11 views

CVE-2026-92813

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

6.9CVSS0.00288EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/16 8:32 p.m.10 views

EUVD-2026-81071

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

6.9CVSS0.00288EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/16 8:32 p.m.31 views

CVE-2026-92813 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

6.9CVSS0.00288EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/16 8:32 p.m.13 views

CVE-2026-92813

Metabase (through 0.63.18 ) is vulnerable to a Server-Side Request Forgery (SSRF) caused by improper validation of the unspecified address 0.0.0.0 in custom GeoJSON URLs . An unauthenticated attacker can save a malicious GeoJSON entry using 0.0.0.0 and trigger server-side requests that reach loop...

6.9CVSS0.00288EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/16 8:32 p.m.5 views

CVE-2026-92813 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

6.9CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 10:34 p.m.10 views

CVE-2022-24853

CVE-2022-24853 Metabase NTLM Reflection / Relay Attack CVE-2022-24853 Blog Post about the finding: https://secure77.de/metabase-ntlm-relay-attack/ Github Security Advisory: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m POC root@kitploit:...

5.9CVSS6.2AI score0.02524EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-82055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted...

7.1CVSS5.4AI score0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/08 5:18 p.m.10 views

CVE-2026-82055

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

7.1CVSS0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 4:12 p.m.28 views

CVE-2026-82055 Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

7.1CVSS0.00283EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 4:12 p.m.9 views

EUVD-2026-72942

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

7.1CVSS5.4AI score0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 4:12 p.m.15 views

CVE-2026-82055

MongoDB Server is affected by a null pointer dereference in its 2dsphere index key generation . When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing leaves an internal object in a partially initialized state. Subsequen...

7.1CVSS5.4AI score0.00283EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
added 2026/09/08 4:12 p.m.8 views

Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

7.1CVSS5.4AI score0.00283EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/18 5:16 p.m.8 views

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

4CVSS0.00225EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/18 4:36 p.m.14 views

EUVD-2026-61048

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

4CVSS5.3AI score0.00225EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/18 4:36 p.m.34 views

CVE-2026-50126

adaguc-server (versions prior to 7.2.2) has a memory-safety flaw in adagucserverEC/CConvertGeoJSON.cpp: it indexes coordinate array values and uses array length as a loop bound without validating JSON node type or coordinate length, affecting Polygon, LineString, MultiLineString and MultiPolygon ...

4CVSS5.3AI score0.00225EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:36 p.m.43 views

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

4CVSS5.3AI score0.00225EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder