15891 matches found
CVE-2022-40497
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution RCE vulnerability via the Active Response endpoint...
Mobile Mouse 3.6.0.4 Remote Code Execution Exploit
This Metasploit module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol to deploy a payload and run it from the server. This module will only deploy a payload if the server is set without a password default. Tested against 3.6.0.4, the current version at the time of module...
Microsoft Exchange ProxyNotShell RCE
This module chains two vulnerabilities on Microsoft Exchange Server that, when combined, allow an authenticated attacker to interact with the Exchange Powershell backend CVE-2022-41040, where a deserialization flaw can be leveraged to obtain code execution CVE-2022-41082. This exploit only suppor...
Mobile Mouse Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mobile Mouse RCE', 'Description' = %q This module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol to deploy a payload and run ...
CVE-2022-40497
CVE-2022-40497 affects Wazuh: versions 3.6.1–3.13.5, 4.0.0–4.2.7, and 4.3.0–4.3.7 are vulnerable to authenticated remote code execution via the Active Response endpoint. Root cause described across sources as insufficient filtering of the constructed code segment at the Active Response endpoint, ...
CVE-2022-40497
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution RCE vulnerability via the Active Response endpoint...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
ToaruOS 2.0.1 is affected by a readelf component vulnerability that introduces a global overflow when parsing crafted ELF files, enabling remote code execution. Root cause: a global overflow in readelf. Impact: remote code execution if untrusted ELF files are parsed. Mitigation/workaround from PT...
CVE-2022-40878
CVE-2022-40878 affects the Exam Reviewer Management System 1.0. An authenticated attacker can upload a web-shell PHP file via the profile page, leading to Remote Code Execution (RCE) . The vulnerability arises from an insecure file-upload path on the profile page, enabling arbitrary code executio...
Flaw in some ManageEngine apps is being actively exploited, says CISA
CISA the Cybersecurity and Infrastructure Security Agency recently added CVE-2022-35405--a remote code executionRCE vulnerability affecting Zoho ManageEngine PAM360 versions 5500 and earlier, Password Manager Pro versions 12100 and earlier, and Access Manager Plus versions 4302 and earlier--to it...
CVE-2022-40497: Improper Control of Generation of Code
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution RCE vulnerability via the Active Response endpoint...
CVE-2022-38932: Out-of-bounds Write
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804 Bitbucket RCE 2022 This repo is part of the...
pfBlockerNG 2.1.4_26 Shell Upload
!/usr/bin/env python3 Original Advisory: https://www.ihteam.net/advisory/pfblockerng-unauth-rce-vulnerability/ import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning...
WiFi Mouse 1.8.3.4 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wifi Mouse RCE', 'Description' = %q The WiFi Mouse Mouse Server from Necta LLC contains an auth bypass as the authentication is completely...
Online Diagnostic Lab Management System 1.0 SQL Injection / Shell Upload
Exploit Title: Online Diagnostic Lab Management System - Remote Code Execution RCE Unauthenticated Google Dork: N/A Date: 2022-9-23 Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage:...
WiFi Mouse 1.8.3.4 Remote Code Execution Exploit
The WiFi Mouse Mouse Server from Necta LLC contains an authentication bypass as the authentication is completely implemented entirely on the client side. By utilizing this vulnerability, is possible to open a program on the server cmd.exe in our case and type commands that will be executed as the...