Leostream post-auth SQLi lo_export webshell sudo root RCE

Login → callback.pl SQLi forged r digest writes welcome.pl via loexport; trigger with ?c= optional sudo. """Leostream Connection Broker SQLi loexport Perl webshell RCE.""" from future import annotations import base64 import hashlib import re from urllib.parse import quote, urlencode from...

Leostream unauthenticated Server.Register rogue agent + SSRF

Frontier RPC2 Server.Register without auth injects VM record; optional callback IP/port triggers outbound Agent.Connect SSRF. """Leostream Connection Broker unauthenticated Server.Register + SSRF.""" from future import annotations import hashlib import re from xml.sax.saxutils import escape from...

Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Regist — Detect

Fingerprint / reachability check for Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Registration + SSRF !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Registration + SSRF""" from...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Leostream Login Panel - Detect

Leostream login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Leostream login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Leostream Login Panel - Detect', 'description':...

CVE-2018-18817

The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

EUVD-2018-10533

Malware in sbrugna...

EUVD-2021-28569

Malicious code in bioql PyPI...

EUVD-2021-28568

Malicious code in bioql PyPI...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41551

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

Code injection

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

Directory traversal

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link...

CVE-2021-41550

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code...

CVE-2021-41550

The CVE-2021-41550 entry affects Leostream Connection Broker 9.0.40.17, where an administrator can upload and execute Perl code. The NVD entry cites a network-accessible vulnerability with low attack complexity and requires a high-privilege context (prerequisites: HIGH; UI: NONE) leading to parti...