CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 디렉토리 인덱싱 취약점 설명 TOTOLINK-A702R-V1.0.0-B20161227.1023의 로그인 포털의 디렉토리 인덱싱으로 인해 공격자가 GET 파라미터를 통해 /icons/ 디렉토리에 접근할 수 있습니다. 추가 정보 웹 서버의 디렉토리 목록을 비활성화하여 완화합니다. 취약점 유형 디렉토리 인덱싱 제품 공급업체 TOTOLINK 영향을 받는 제품 코드 베이스 TOTOLINK-A702R-V1.0.0-B20161227.1023 -...

Zabbix-cve-2022-23131-SSO-bypass

Zabbix-cve-2022-23131-SSO-bypass Zabbix SSO 로그인 포털을 우회하려면 브라우저에서 쿠키를 가져와야 합니다. 스크립트에 있는 쿠키로 교체하세요. 또한 로그인하려는 사용자 이름을 변경하고 익스플로잇을 실행하세요 대부분의 경우 Zabbix에서는 "Admin"이 됩니다. 이제 출력된 "encoded payload" 부분수정된 새 jwt을 가져와 현재 jwt 토큰과 교체하여 로그인하세요...

ShinyHunters escalates Canvas attacks with school login defacements

Days after confirming a major data breach, Instructure is now facing a second blow. Earlier this week, Instructure confirmed a major data breach affecting its cloud‑hosted Canvas environment, with the ShinyHunters group claiming it stole hundreds of millions of records tied to thousands of school...

CVE-2023-40519

A cross-site scripting XSS vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575ee9195b0, 01.01.01.30097902fd999e76, and 00.12.01.95655881254b459 allows remote attackers to inject arbitrary web script or HTML v...

EUVD-2018-3481

Malware in sbrugna...

EUVD-2020-19880

Malware in sbrugna...

EUVD-2020-16573

Malware in sbrugna...

EUVD-2021-31096

Malicious code in bioql PyPI...

EUVD-2021-30021

Malicious code in bioql PyPI...

EUVD-2022-33639

Malicious code in bioql PyPI...

CVE-2024-3378

A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login of the component Login Portal. The manipulation of the argument redirectUrl leads to cross site scripting. The attack...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29296

A reflected cross-site scripting XSS vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2021-34218

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...

Clinic's Patient Management System 1.0 - Unauthenticated RCE

This module exploits an SQL injection in login portal, which allows to log in as admin. Next, it allows the attacker to upload malicious files through user modification to achieve RCE. Module Options msf use exploit/multi/http/clinic/pmssqlitorce msf undefinedpmssqlitorce show actions ...actions...

VulnCheck KEV: CVE-2024-3378

A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login of the component Login Portal. The manipulation of the argument redirectUrl leads to cross site scripting. The attack...

CVE-2024-44349

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB...

CVE-2024-44349

A SQL injection vulnerability exists in the login portal of AnteeoWMS versions prior to v4.7.34 . Unauthenticated attackers can execute arbitrary SQL commands via the username parameter , potentially leading to the disclosure of sensitive data from the underlying database. A Proof of Concept (PoC...

CVE-2024-44349

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB...

Cambium EPMP 1000 Login Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium ePMP 1000 Login Scanner', 'Description' = % This module scans for Cambium ePMP 1000 management login portals, and attempts to identify...