Server-side Request Forgery (SSRF)

Overview cowrie is a Cowrie SSH/Telnet Honeypot. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the emulation of wget and curl commands in shell mode. An attacker can cause the system to send arbitrary HTTP requests to external hosts by repeatedly invokin...

CVE-2019-5127

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:37+00:00| seen| https://t.me/ctinow/175122 2024-05-22 06:15:17+00:00| seen| https://t.me/CyberSecurityTechnologies/2661 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2024-12-26...

CVE-2023-4220

creationtimestamp| type| source ---|---|--- 2023-12-17 14:43:03+00:00| seen| https://t.me/ctinow/155617 2024-07-08 07:34:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7908 2024-07-11 07:29:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7942 2024-07-29...

CVE-2022-29014

creationtimestamp| type| source ---|---|--- 2022-06-09 07:33:02+00:00| seen| https://t.me/cibsecurity/44074 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-31 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-31...

CVE-2014-9727

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fritzboxechoexec.rb 2023-02-19 12:43:33+00:00| published-proof-of-concept| https://t.me/JerusalemElectronicArmy/179 2024-12-15...

CVE-2000-1141

Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system...

CVE-2000-1142

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system...

ManTrap 1.6.1 - Root Directory Inode Disclosure

ManTrap 1.6.1 - Root Directory Inode Disclosure / source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real ...