CVE-2019-15107

CVE-2019-15107 Programme de test pour CVE-2019-15107 Cette vulnérabilité d'exécution de commande à distance dans webmin est principalement due à qx/…/ en Perl qui permet l'exécution de commandes. L'exploitation nécessite certaines conditions particulières. Lors de la reproduction, j'ai rapidement...

cve-2019-15107

CVE-2019-15107 - ثغرة تنفيذ أوامر عن بعد غير مصرح بها في Webmin الوصف يحتوي هذا المستودع على استغلال إثبات المفهوم PoC للثغرة CVE-2019-15107 التي تؤثر على إصدارات Webmin من 1.890 إلى 1.920. يستغل البرنامج النصي بابًا خلفيًا في الإصدارات 1.890 إلى 1.920 يسمح للمستخدمين غير المصادق عليهم بحقن أوامر...

CVE-2023-2868

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

Command injection

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

Webmin 1.920 password_change.cgi Backdoor Exploit

This Metasploit module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attackers inserted Perl qx statements into the build server's source code on two separate...

Webmin password_change.cgi Backdoor

This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attackers inserted Perl qx statements into the build server's source code on two separate occasions: onc...

GroundWork monarch_scan.cgi OS Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

GroundWork monarch_scan.cgi OS Command Injection

This module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi where user controlled input is used in the perl qx function. This allows any remote authenticated attacker, regardle...