Zena-CVE-2021-45026

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...

CVE-2026-78835

The Rocket Software Rocket Remote Desktop version 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials (CWE-522). This security weakness allows for unauthorized access or data exposure due to inadequate protection of sensitive information. The vulnerability is reported with a CRITICA...

EUVD-2023-32177

Malicious code in bioql PyPI...

EUVD-2023-32178

Malicious code in bioql PyPI...

EUVD-2023-32171

Malicious code in bioql PyPI...

EUVD-2023-32176

Malicious code in bioql PyPI...

EUVD-2024-54838

Malicious code in bioql PyPI...

EUVD-2023-32175

Malicious code in bioql PyPI...

EUVD-2023-32179

Malicious code in bioql PyPI...

EUVD-2023-32174

Malicious code in bioql PyPI...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection due to the improper handling of the filter parameter. This security flaw could allow an attacker to execute malicious SQL commands. No information is currently available regarding a newer version that contains a fix for t...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

Metasploit Weekly Wrap-Up

Rocket Software UniRPC Exploits Ron Bowes submitted two exploit modules for vulnerabilities he discovered in the UniRPC server for Rocket Software’s UniData product. The first exploit module, exploit/linux/misc/unidataudadminauthbypass exploits an authentication bypass to ultimately gain remote...

Rocket Software Unidata 8.2.4 Build 3003 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule The amount of padding required to overwrite the return addr 'offset' = 0x2b8, This returns to "mov rdi, rsp / call system", which means the...

Rocket Software Unidata udadmin_server Stack Buffer Overflow in Password

This modlue exploits an authentication bypass vulnerability in the Linux version of udadminserver, which is an RPC service that comes with the Rocket Software UniData server, which runs as root. This vulnerability affects UniData versions 8.2.4 build 3003 and earlier for Linux, but this module...

Rocket Software Unidata udadmin_server Authentication Bypass

This module exploits an authentication bypass vulnerability in the Linux version of udadminserver, which is an RPC service that comes with the Rocket Software UniData server. This affects versions of UniData prior to 8.2.4 build 3003. This service typically runs as root. It accepts a username of...

CVE-2023-28502

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user...