Lucene search
+L

39 matches found

Kitploit
Kitploit
•added 2026/09/24 8:50 p.m.•1150 views

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

6.2AI score
SaveExploits0References20
Kitploit
Kitploit
•added 2026/09/24 7:58 a.m.•15 views

maltrail

Maltrail Maltrail es un sistema de detección de tráfico de red que identifica la comunicación con infraestructura maliciosa conocida y reporta anomalías de tráfico seleccionadas. Compara dominios, URLs, direcciones IP, pares IP:port y valores de User-Agent observados en la red contra un conjunto ...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/20 11:16 p.m.•9 views

CVE-2023-27163---Maltrail-0.53---RCE

CVE-2023-27163---Maltrail-0.53---RCE root@kitploit: Create by TheAlchimist cve-2023-27163-maltrail.py for reverse shell...

6.5CVSS7AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
•added 2026/09/20 9:04 p.m.•11 views

htb-sau-exploit-chain

HTB Sau Exploit Chain — CVE-2023-27163 SSRF + Maltrail RCE Automation A Python exploit script that chains CVE-2023-27163 Server-Side Request Forgery in Request Baskets ≤ 1.2.1 with an unauthenticated Remote Code Execution vulnerability in Maltrail 0.53, delivering a reverse shell. Designed for th...

6.5CVSS7.2AI score0.06591EPSS
SaveExploits29
NVD
NVD
•added 2026/09/15 6:17 a.m.•9 views

CVE-2026-91002

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS0.00767EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/15 5:30 a.m.•8 views

CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS5.1AI score
SaveExploits0References10
CVE
CVE
•added 2026/09/15 5:30 a.m.•13 views

CVE-2026-91002

stamparm maltrail versions up to 3.0.1 contain a missing authentication flaw in the _blacklist function of core/httpd.py (Blacklist Endpoint). A remote, unauthenticated attacker can manipulate this endpoint, resulting in a low confidentiality impact with no stated integrity or availability impact...

6.9CVSS5.2AI score0.00767EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/15 5:30 a.m.•14 views

EUVD-2026-78274

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS5.2AI score0.00767EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/15 5:30 a.m.•29 views

CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS0.00767EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/15 5:30 a.m.•7 views

CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS5.2AI score0.00767EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•12 views

PT-2026-91864

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The exploit has been...

6.9CVSS5.2AI score0.00767EPSS
SaveExploits0References9
GithubExploit
GithubExploit
•added 2026/05/12 4:45 a.m.•145 views

Maltrail-v0.53-Exploit

Maltrail v0.53 — Command Injection Exploit I wrote this explo...

6.5CVSS6.1AI score0.06591EPSS
SaveExploits29
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•12 views

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function, allowing the attacker to execute arbitrary code.

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

10CVSS6.2AI score0.05602EPSS
SaveExploits1References5Affected Software1
Nuclei
Nuclei
•added 2026/02/04 7:00 a.m.•29 views

Maltrail <=0.54 Username Parameter - Remote Command Execution

Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. id: CVE-2025-34073 info: name: Maltrail =0.54 Username Parameter - Remote Command Execution author: SeungAh-Hong severity: critical...

10CVSS7.4AI score0.05602EPSS
SaveExploits1References4
GithubExploit
GithubExploit
•added 2026/02/03 6:32 p.m.•173 views

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163---Maltrail-0.53---RCE...

6.5CVSS5.3AI score0.06591EPSS
SaveExploits29
GithubExploit
GithubExploit
•added 2025/11/26 11:17 a.m.•460 views

Maltrail-0.52-Exploit-RCE

Maltrail-0.52-Exploit-RCE MALTRAIL 0.52 Un...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/07/04 2:22 p.m.•25 views

CVE-2025-34073

An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...

10CVSS8.2AI score0.05602EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/02 2:15 p.m.•18 views

CVE-2025-34073

An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...

10CVSS6.2AI score0.05602EPSS
SaveExploits1References5
NVD
NVD
•added 2025/07/02 2:15 p.m.•24 views

CVE-2025-34073

An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...

10CVSS0.05602EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/07/02 1:46 p.m.•24 views

EUVD-2025-19716

An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...

10CVSS8.2AI score0.05602EPSS
SaveExploits1References5
Rows per page
Query Builder