Lucene search
+L

2243 matches found

Kitploit
Kitploit
added 2026/08/25 11:22 p.m.1 views

CVE-2024-6670

CVE-2024-6670 Progress Software WhatsUp Gold HasErrors SQL Injection 인증 우회 취약점 CVE-2024-6670에 대한 PoC 해당 취약점의 근본 원인 분석은 제 블로그에서 확인할 수 있습니다: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ 사용법 root@kitploit: python CVE-2024-6670.py --newpassword Pwned --target-url...

9.8CVSS9.5AI score0.93EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:51 p.m.122 views

batea

Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal of Batea is to...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 7:21 a.m.1 views

CVE-2024-5009

CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword 权限提升漏洞(CVE-2024-5009)的PoC 关于该漏洞的根本原因分析可在我的博客中找到: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ 使用方法 root@kitploit: python3 CVE-2024-5009.py --target https://192.168.0.231/ | | | | | | | | | | | | \ | ...

8.4CVSS8.6AI score0.1503EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.83 views

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

9.8CVSS9.4AI score0.93EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.86 views

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

9.8CVSS9.4AI score0.99288EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.12 views

WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...

9.8CVSS9.4AI score0.18988EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 4:26 a.m.1 views

CVE-2024-5009

CVE-2024-5009 : WhatsUp Gold SetAdminPassword 권한 상승 CVEHunter는 비동기 성능으로 CVE-2024-5009를 탐지하고 악용하기 위한 취약점 탐지 및 공격 도구입니다. 설치 root@kitploit: git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -r requirements.txt python3 cvehunter.py --help 🚀 사용법 root@kitploit: python...

8.4CVSS8.2AI score0.1503EPSS
SaveExploits2
NVD
NVD
added 2026/08/12 4:17 p.m.9 views

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS0.00437EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.9 views

CVE-2026-65937

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content...

8CVSS0.00242EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.10 views

CVE-2026-65939

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...

6.8CVSS0.00238EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.11 views

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS0.00211EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.10 views

CVE-2026-65938

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

4.3CVSS0.00161EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/12 3:23 p.m.44 views

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS0.00437EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/12 3:23 p.m.61 views

CVE-2026-65941

CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...

8.8CVSS5.8AI score0.00437EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/12 3:23 p.m.8 views

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS5.7AI score0.00437EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/12 3:23 p.m.8 views

EUVD-2026-57267

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS5.8AI score0.00437EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/12 3:23 p.m.8 views

EUVD-2026-57266

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS5.4AI score0.00211EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/12 3:23 p.m.9 views

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS5.4AI score0.00211EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/12 3:23 p.m.30 views

CVE-2026-65940 WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS0.00211EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/12 3:23 p.m.22 views

CVE-2026-65940

WhatsUp Gold is affected in versions released before 2026.0.2. The issue stems from excessive file system permissions, enabling a privileged attacker to write arbitrary files to a web-accessible location on the host server. Remediation inferred: upgrade to 26.0.2 or later.

6.8CVSS5.4AI score0.00211EPSS
SaveExploits0References3
Rows per page
Query Builder