2246 matches found
CVE-2024-5009
CVE-2024-5009 : WhatsUp Gold SetAdminPassword Escalação de Privilégios Ferramenta CVEHunter para detecção e exploração de vulnerabilidades para CVE-2024-5009 com desempenho assíncrono. Instalação root@kitploit: git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -...
CVE-2024-4885
CVE-2024-4885 PoC für CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthentifizierte Remote-Codeausführung CVE-2024-4885 Technische Analyse Eine Root-Cause-Analyse der Schwachstelle finden Sie auf meinem Blog: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ Verwendu...
CVE-2024-4883
CVE-2024-4883 PoC para CVE-2024-4883 Progress WhatsUp Gold WriteDatafile Execução Remota de Código Não Autenticada CVE-2024-4883 Análise Técnica Uma análise de causa raiz da vulnerabilidade pode ser encontrada no meu blog:...
CVE-2024-5009
CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword विशेषाधिकार वृद्धि CVE-2024-5009 के लिए PoC इस भेद्यता का मूल कारण विश्लेषण मेरे ब्लॉग पर पाया जा सकता है: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ उपयोग root@kitploit: python3 CVE-2024-5009.py...
CVE-2024-6670
CVE-2024-6670 PoC für die Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Schwachstelle CVE-2024-6670 Eine Root-Cause-Analyse der Schwachstelle finden Sie in meinem Blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Verwendung root@kitploit:...
golddigger
Gold Digger Cerca file per oro Gold Digger è un semplice strumento utilizzato per aiutare a scoprire rapidamente informazioni sensibili nei file in modo ricorsivo. Originariamente scritto per assistere nella ricerca rapida di file ottenuti durante un penetration test. Installazione Gold Digger...
batea
Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal of Batea is to...
WhatsUp Gold HasErrors SQL Injection - Authentication Bypass
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...
Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...
WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass
In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...
CVE-2026-65941
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...
CVE-2026-65937
In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content...
CVE-2026-65938
In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...
CVE-2026-65939
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-2026-65940
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...
CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...
CVE-2026-65941
CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...
CVE-2026-65941
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...
EUVD-2026-57267
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...