Spiceworks 7.5 HTTP Header Injection

Exploit Title: Spiceworks 7.5 - HTTP Header Injection Google Dork: inurl:/prousers/login Discovered Date: 15/09/2020 Exploit Author: Ramikan Vendor Homepage: https://www.spiceworks.com Affected Version: 7.5.7.0 may be others. Tested On Version: 7.5.7.0 CVE : CVE-2020-25901 Vulnerability: Host...

Multiple Vulnerabilities in SpiceWorks 7.5 TFTP

SpiceWorks is a suite of network device management and monitoring software for small and medium-sized businesses from Spiceworks, Inc. A remote file overwrite and upload vulnerability exists in SpiceWorks 7.5 TFTP. A remote attacker can gain unauthorized access to the Spiceworks data configuratio...