111 matches found
Exploit for OS Command Injection in Kemptechnologies Loadmaster
CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadM...
Exploit for OS Command Injection in Progress Loadmaster
CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Comma...
Progress Software Kemp LoadMaster mangle Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mangle executable. The issue results from the lack of proper...
Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation
Now-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the wild, it has emerged. The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added CVE-2024-1212 CVSS score: 10.0, a maximum-severity security...
Progress Kemp LoadMaster OS Command Injection Vulnerability
Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution...
Kemp LoadMaster 输入验证错误漏洞
Kemp LoadMaster is a highly secure application from Kemp. An input validation error vulnerability exists in Kemp LoadMaster that stems from improper input validation, resulting in an authenticated operating system command injection vulnerability...
Vulnerability fixed in Kemp LoadMaster
Kemp Technologies has fixed a vulnerability in Kemp LoadMaster and Progress LoadMaster. A malicious party could exploit the vulnerability to execute arbitrary commands on the vulnerable system without prior authentication via specially prepared HTTP calls. For successful abuse, the malicious part...
Kemp LoadMaster 安全漏洞
Kemp LoadMaster is a highly secure application from Kemp. A security vulnerability exists in Kemp LoadMaster version 7.2.60.0 and prior versions, which stems from incorrect input validation and allows operating system command injection...
Kemp Loadmaster 安全漏洞
Kemp Loadmaster is an optimized load balancing program from Kemp. A security vulnerability exists in versions prior to Kemp Loadmaster v.7.2.60.0. A remote attacker could exploit this vulnerability to cause a system denial of service via the libkemplink.so, isreverse library...
PT-2024-12220 · Kemp Technologies · Kemp Loadmaster +1
Name of the Vulnerable Software and Affected Versions: Kemptechnologies Loadmaster versions prior to 7.2.60.0 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the libkemplink.so, isreverse library. Recommendations: For versions prior to 7.2.60.0, upda...
Progress Kemp LoadMaster Remote Command Execution
Progress Kemp LoadMaster versions 7.2.48.1 7.2.59.2 / 7.2.48.1 7.2.54.8 and 7.2.48.1 7.2.48.10 is affected by a vulnerability allowing an unauthenticated attacker to execute remote commands via a specially forged request. No source data...
Kemp LoadMaster Local sudo Privilege Escalation Exploit
This Metasploit module abuses a feature of the sudo command on Progress Kemp LoadMaster. Certain binary files are allowed to automatically elevate with the sudo command. This is based off of the file name. Some files have this permission are not write-protected from the default bal user. As such,...
Metasploit Weekly Wrap-Up 05/03/24
Dump secrets inline This week, our very own cdelafuente-r7 added a significant improvement to the well-known Windows Secrets Dump module to reduce the footprint when dumping SAM hashes, LSA secrets and cached credentials. The module is now directly reading the Windows Registry remotely without...
PT-2024-26505 · Kemp · Kemp Loadmaster
Name of the Vulnerable Software and Affected Versions: Kemp LoadMaster affected versions not specified Description: Unauthenticated attackers can perform actions using SSH private keys by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster grou...
Kemp LoadMaster Unauthenticated Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kemp LoadMaster Unauthenticated Command Injection', 'Description' = %q This module exploits an unauthenticated command injection vulnerability in...
Kemp LoadMaster Unauthenticated Command Injection Exploit
This Metasploit module exploits an unauthenticated command injection vulnerability in Progress Kemp LoadMaster in the authorization header after version 7.2.48.1. The following versions are patched: 7.2.59.2 GA, 7.2.54.8 LTSF, and 7.2.48.10 LTS. This module requires Metasploit:...
Progress Kemp Flowmon Web Interface Detection
Binary data progresskempflowmondetect.nbin...
Progress Kemp Flowmon 11.x < 11.1.14, 12.x < 12.3.5 RCE (CVE-2024-2389)
The version of Progress Kemp Flowmon installed on the remote host is prior to 11.1.14 or 12.3.5. It is, therefore, affected by an unauthenticated command injection vulnerability as referenced in the CVE-2024-2389 advisory. - Unauthenticated, remote attackers can gain access to the web interface o...
