cve-2019-15107

CVE-2019-15107 - ثغرة تنفيذ أوامر عن بعد غير مصرح بها في Webmin الوصف يحتوي هذا المستودع على استغلال إثبات المفهوم PoC للثغرة CVE-2019-15107 التي تؤثر على إصدارات Webmin من 1.890 إلى 1.920. يستغل البرنامج النصي بابًا خلفيًا في الإصدارات 1.890 إلى 1.920 يسمح للمستخدمين غير المصادق عليهم بحقن أوامر...

CVE-2019-15107

CVE-2019-15107 برنامج اختبار CVE-2019-15107 ثغرة تنفيذ الأوامر عن بُعد في Webmin هذه، تحدث تقريبًا بسبب qx/…/ في Perl مما يؤدي إلى تنفيذ الأوامر، ويتطلب الاستغلال شروطًا خاصة معينة، وعند إعادة الإنتاج كتبت برنامج استغلال بواجهة رسومية. من الجدير بالذكر أنه إذا تم استخدام قيمة مستخدم وهمية في user...

CVE-2023-2868

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

Command injection

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

CVE-2023-2868: Improper Input Validation

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

Webmin 1.920 password_change.cgi Backdoor Exploit

This Metasploit module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attackers inserted Perl qx statements into the build server's source code on two separate...

Webmin password_change.cgi Backdoor

This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attackers inserted Perl qx statements into the build server's source code on two separate occasions: onc...

GroundWork monarch_scan.cgi OS Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

GroundWork monarch_scan.cgi OS Command Injection

This module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi where user controlled input is used in the perl qx function. This allows any remote authenticated attacker, regardle...