EUVD-2019-7010

Malware in sbrugna...

KSLabs KSWEB hostFile parameter directory traversal vulnerability

KSLabs KSWEB is an open source server. A directory traversal vulnerability exists in the handling of the KSLabs KSWEB hostFile parameter, which can be exploited by remote attackers to submit a special request to view the contents of system files...

CVE-2019-16198

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter...

Directory traversal

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter...

CVE-2019-16198: Improper Limitation of a Pathname to a Restricted Directory

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter...

Native DNS Server (Example)

This module provides a Rex based DNS service which can store static entries, resolve names over pivots, and serve DNS requests across routed session comms. DNS tunnels can operate across the Rex switchboard, and DNS other modules can use this as a template. Setting static records via hostfile...