CVE-2020-24032

CVE-2020-24032 Descripción sugerida tz.pl en los appliances virtuales XoruX LPAR2RRD y STOR2RRD 2.70 permite la inyección de comandos del sistema operativo mediante metacaracteres de shell en una zona horaria, a través de cmd=set&tz=OS. Tipo de vulnerabilidad Otro Inyección de comandos del sistem...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE 描述 : 本仓库包含 CVE-2025-54769 的概念验证 PoC 利用代码，该漏洞存在于 lpar2rrd 中。 此漏洞通过滥用 /lpar2rrd-cgi/upgrade.sh 接口，可实现远程代码执行（RCE）和目录遍历。漏洞利用流程如下： 脚本生成 : 自动创建一个恶意 Perl CGI 载荷（users.pl），该载荷可执行任意 shell 命令（默认：whoami）。 载荷上传 : 使用 libcurl 将生成的脚本作为“升级包” POST 到易受攻击的接口，绕过基本的文件验证。 目录遍历 :...

EUVD-2014-4897

Malware in sbrugna...

EUVD-2025-22953

Malicious code in bioql PyPI...

EUVD-2021-29342

Malicious code in bioql PyPI...

EUVD-2021-29341

Malicious code in bioql PyPI...

LPAR2RRD Remote Code Execution

This repository contains a proof of concept exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint...

LPAR2RRD 8.04 - Remote Code Execution (RCE)

/ Author : Byte Reaper Title : LPAR2RRD 8.04 - Remote Code Execution RCE CVE : CVE-2025-54769 Vulnerability: RCE && directory traversal Description : Uploads a malicious Perl script via the LPAR2RRD upgrade endpoint, exploits directory traversal to place it in a CGI-executable path, then triggers...

CVE-2025-54767

An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user...

CVE-2025-54767

An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user...

CVE-2025-54767

An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user...

CVE-2025-54767: Incorrect Use of Privileged APIs

An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user...

📄 Xorux LPAR2RRD 8.04 Information Disclosure

Xorux LPAR2RRD versions 8.04 and below have an API endpoint that should be limited to web application administrators. It is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive...

XORUX LPAR2RRD 安全漏洞

XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from improper access control of API endpoints, which could lead to the disclosure of sensitive information...

XORUX LPAR2RRD 安全漏洞

XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from improper privilege management and could lead to process termination...

📄 Xorux LPAR2RRD 8.04 Denial of Service

Xorux LPAR2RRD versions 8.04 and below have an issue where an authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user. KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service Title: Xorux LPAR2RRD Read Only User Denial of...

XORUX LPAR2RRD 安全漏洞

XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from a combination of directory traversal and file upload functionality that could lead to remote code execution...

📄 Xorux LPAR2RRD 8.04 File Upload / Directory Traversal

Xorux LPAR2RRD versions 8.04 and below allow an authenticated, read-only user to upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code...

CVE-2025-54769 KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution RCE by an attacker...

CVE-2025-54769 KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution RCE by an attacker...