Raritan PX3 PDU G4 Firmware 4.3.14 Diagnostics Command Injection

Raritan PX3 PDU G4 firmware version 4.3.14 contains an authenticated command injection vulnerability in the diagnostics ping and traceroute handlers due to inverted hostname-validation handling. The proof of concept sends an authenticated JSON-RPC request containing a crafted host parameter...

Raritan EMX port_mux config injection root RCE

Login → download config → inject protolistenerhttp program=/bin/sh → upload → TCP connect triggers execv as root. """Raritan EMX authenticated portmux protolistener config injection root RCE.""" from future import annotations import re import socket import time import uuid from urllib.parse impor...

Raritan EMX — Authenticated Config Injection into port_mux proto_listener → Root — Detect

Fingerprint / reachability check for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Raritan EMX — Authenticated Config Injection into portmux protolistener → Root RCE""" from kittysploit import from...

Raritan PDU - Login Panel Detection

Raritan intelligent PDU web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Raritan intelligent PDU web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

EUVD-2014-8921

Malware in sbrugna...

EUVD-2005-2137

Malware in sbrugna...

EUVD-2014-2977

Malware in sbrugna...

EUVD-2014-3838

Malware in sbrugna...

EUVD-2018-13234

Malware in sbrugna...

CVE-2018-20687

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

Server side request forgery (ssrf)

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

CVE-2018-20687

An XXE vulnerability exists in Raritan CommandCenter Secure Gateway (CC-SG) before version 8.0.0, in CommandCenterWebServices/.*?wsdl. The flaw allows remote unauthenticated attackers to read arbitrary files or perform server-side request forgery (SSRF) via a crafted DTD in an XML request. Exploi...

CVE-2018-20687

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

PT-2019-10164

Name of the Vulnerable Software and Affected Versions: Raritan CommandCenter Secure Gateway versions prior to 8.0.0 Description: The issue allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks. This is achieved by sending a crafted DTD in ...

CVE-2018-20687: Improper Restriction of XML External Entity Reference

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

Raritan CommandCenter Secure Gateway Cross-Site Scripting Vulnerability

Raritan CommandCenter Secure Gateway CC-SG is a data center server management solution from Raritan. The product provides remote control, centralized authentication, authorization and logging. A cross-site scripting vulnerability exists in Raritan CommandCenter Secure Gateway, which can be...

Raritan CommandCenter Secure Gateway XML External Entity Injection Vulnerability

Raritan CommandCenter Secure Gateway CC-SG is a data center server management solution from Raritan. The product provides remote control, centralized authentication, authorization and logging. A code issue vulnerability exists in Raritan versions prior to 8.0.0. The vulnerability stems from an...

Raritan CommandCenter Secure Gateway Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Vulnerability on Raritan CommandCenter Secure Gateway II. CVE REFERENCE ------------------------- - III. VENDOR ------------------------- https://www.raritan.com/support/product/commandcenter-secure-gateway IV. TIMELINE -------------------------...

Raritan PowerIQ Detection (HTTP)

HTTP based detection of Raritan PowerIQ. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106817";...

Raritan PowerIQ Rails RCE Vulnerability

Raritan PowerIQ is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...