CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 远程代码执行 ⚠️ 免责声明 本仓库严格仅供教育和研究目的使用 。 此处提供的信息和代码仅可用于受控环境 ，例如私有实验室机器。 未经授权将本代码用于非您所有或未经明确许可测试的系统，属于非法且不道德的行为。 作者不对任何滥用或造成的损害负责 。 🔍 关于漏洞 OpenNetAdmin 18.1.1 通过 xajax AJAX 请求接口存在远程代码执行漏洞。 该漏洞源于不正确的输入清理，允许通过向 /ona/ 发送特制的 POST 请求进行命令注入。 此漏洞利用 tooltips 插件触发反向 shell...

CVE-2019-25065-exploit

CVE-2019-25065 - POC Esta es una POC de CVE-2019-25065 - inyección de comandos del sistema operativo en OpenNetAdmin v18.1.1 El exploit está escrito en bash, es compatible con el entorno linux. fue probado en kali linux 2024.4, y Ubuntu 22.04.5 LTS dependencias: paquete gridsite-clients de debian...

EUVD-2019-11510

Malware in sbrugna...

CVE-2019-25065

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

VulnCheck KEV: CVE-2019-25065

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2019-25065

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2019-25065

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

Privilege escalation

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2019-25065 OpenNetAdmin os command injection

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2019-25065

A critical OS command injection vulnerability exists in OpenNetAdmin version 18.1.1 , which can be triggered remotely. The flaw allows an attacker to achieve privilege escalation by manipulating specific functionality within the IPAM system. Publicly available exploits are available in Python and...

CVE-2019-25065 OpenNetAdmin os command injection

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2019-25065: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

OpenNetAdmin 操作系统命令注入漏洞

OpenNetAdmin is a powerful and free IPAM system from the OpenNetAdmin community. It is used to track your IP network. A security vulnerability exists in OpenNetAdmin 18.1.1, which can be exploited by attackers to achieve privilege escalation...

OpenNetAdmin 18.1.1 Remote Command Execution

!/usr/bin/env ruby Exploit Title: OpenNetAdmin 8.5.14 --debug FILE version --debug FILE -h | --help exploit: Exploit the RCE vuln version: Try to fetch OpenNetAdmin version Options: Root URL base path including HTTP scheme, port and root folder Command to execute on the target --debug Display...

OpenNetAdmin 18.1.1 Remote Command Execution Exploit

OpenNetAdmin versions 8.5.14 through 18.1.1 remote command execution exploit written in Ruby. This exploit was based on the original discovery of the issue by mattpascoe...

OpenNetAdmin Ping Command Injection Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. ,...

CVE-2019-25065

creationtimestamp| type| source ---|---|--- 2020-02-21 14:58:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opennetadminpingcmdinjection.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-06-30 12:39:13+00:00...

OpenNetAdmin Ping Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. ,...

OpenNetAdmin 18.1.1 - Command Injection Exploit #RCE

Exploit for php platform in category web applications class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit modul...

OpenNetAdmin 18.1.1 Command Injection

class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit module , 'References' = 'EDB', '47691' , 'DisclosureDate' =...