363 matches found
CVE-2022-24637
CVE-2022-24637 Open Web Analytics OWA - Ejecución remota de código no autenticada https://vulners.com/cve/CVE-2022-24637 Ejemplo root@kitploit: python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...
ProxyListReliabilityCheck
ProxyListReliabilityCheck Script en Perl para probar la fiabilidad de una lista de proxies web abiertos. El script recibe un archivo de texto con una lista de IPAddress:Port de proxies web abiertos a probar 1 por línea. Luego intenta rastrear la siguiente URL a través de cada proxy objetivo:...
CVE-2022-24637
Aplicación vulnerable Open Web Analytics OWA anterior a 1.7.4 permite que un atacante remoto no autenticado obtenga información confidencial del usuario, que puede usarse para obtener privilegios de administrador aprovechando los hashes de caché. Esto ocurre porque los archivos generados con y...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics OWA 1.7.3 中未经认证的远程代码执行利用程序。此工作基于 https://devel0pment.de/?p=2494。 免责声明：此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面许可的系统上使用此脚本。...
CVE-2022-24638
已在EXPLOITDB上发布：https://www.exploit-db.com/exploits/51026 此版本已修复以避免误报 CVE-2022-24637 用于在Open Web Analytics OWA 1.7.4 中实现未经认证的远程代码执行（RCE）的利用脚本。该工作基于 https://devel0pment.de/?p=2494。 免责声明：此脚本旨在用于系统安全审计。请仅在您自己的系统或您已获得书面授权进行渗透测试的系统上使用此脚本。...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics 1.7.3 - 远程代码执行利用工具 v2 针对 Open Web Analytics 1.7.3 - RCE 的有效利用工具，集成了 pentestmonkey 的 php 反弹 shell，修复了无法在缓存中找到用户的问题。 原始利用代码可在 此处 找到。 使用方式 在 php-reverse-shell.php 文件中填写攻击机 IP 和端口，然后使用 -u 参数指定目标漏洞 URL 运行 exploit.py。 root@kitploit: python3 exploit.py -u...
CVE-2022-24637
CVE-2022-24637 Nicht authentifizierte RCE in Open Web Analytics Version / newPassword YourIp YourPort Möglicherweise müssen Sie es mehrmals ausführen, um eine Shell zu erhalten. Das Skript kann verbessert werden...
Open Web Analytics 1.7.3 - Remote Code Execution
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: airflow, mitmproxy, open-webui...
CVE-2026-71554 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, open-webui, prefect-fips, authentik, mitmproxy, localstack, airflow, jupyter-all-spark-notebook, authentik-fips...
MAL-2026-13618 Malicious code in w-screenctl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2f241eacc2eaaaac28d2b9d76aeb67042a109869b28e45a88648bf937f856f When WScreenctl is invoked via the bundled g.mjs entry or the documented systemd/Task Scheduler service units, the package starts a Hapi HTTP server...
CVE-2026-70493
creationtimestamp| type| source ---|---|--- 2026-08-04 22:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2f54-p244-32q6 2026-08-05 12:32:01+00:00| seen| https://gist.github.com/alon710/2d05301b2f45169422f4602c106418b3...
CVE-2026-70490
Open WebUI (self-hosted AI platform) versions 0.8.8–0.11.0 contain a flaw where the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticates its own first-message JWT and omits the verified-user role gate enforced on HTTP terminal routes. As a result, accounts with pendin...
GHSA-73CQ-MCGH-379C Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of 2000-01-01 and then walks forward one interval at a time to find the next run. A single FREQ=MINUTELY rule therefore enumerates roughly a quarter-century of occurrences,...
GHSA-H6X2-583H-X99R Open WebUI: DNS Rebinding SSRF Bypass
Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...
CVE-2026-54020 Open WebUI: DNS Rebinding SSRF Bypass
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL validation and rejected private, loopback, and link-local addresses, but the HTTP clients resolved the hostname again at connection time. An authenticat...
CVE-2026-70481
creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:14+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-mj5r-jf49-m3w7...
CVE-2026-70483
creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:09+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56...
CVE-2026-70483 Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/id cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort...
