120 matches found
CVE-2024-4358
Telerik Report Server 認証バイパス - CVE-2024-4358 概要 Progress Telerik Report Server のバージョン 2024 Q1 10.0.24.305 以前を IIS 上で実行している場合、認証されていない攻撃者が認証バイパスの脆弱性を利用して Telerik Report Server の制限された機能にアクセスできる可能性があります。 詳細はこちら — CVE-2024-4358 免責事項 : この Proof of Concept POC...
CVE-2024-4358
Telerik Report Server 認証バイパス - CVE-2024-4358 免責事項 : この概念実証（POC）は教育的かつ倫理的なテスト目的のみで作成されています。事前の相互同意なしにターゲットに対してこのツールを使用することは違法です。エンドユーザーは適用されるすべての地域、州、連邦法を遵守する責任を負います。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害について責任を負いません。 はじめに ターゲットの検索 潜在的なターゲットを見つけるには、Fofa（Shodan.ioと類似）を使用します： FOFA Dork : title="Teler...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server の逆シリアル化と認証バイパスエクスプロイトチェーン CVE-2024-4358/CVE-2024-1800 技術的分析 脆弱性の根本原因分析は私のブログでご覧いただけます poc 概要 サポートされるバージョン? 基本的にエクスプロイト公開時のすべてのバージョン。将来の参考として、以下のリストにあるすべてのメジャー/マイナーバージョン: 2012 2017 2018 2019 2020 2021 2022 2023 2024 使い方 python CVE-2024-4358.py...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server の逆シリアル化および認証バイパスのエクスプロイトチェーン CVE-2024-4358/CVE-2024-1800 技術的分析 この脆弱性の根本原因分析は私のブログにあります 使用法 python CVE-2024-4358.py --target http://192.168.253.128:83 -c "whoami" ^^ Progress Telerik Report Server pre-authenticated RCE CVE-2024-4358/CVE-2024-1800...
📄 Telerik Report Server 2024 Q1-10.0.24.305 Remote Code Execution
Telerik Report Server versions 2024 Q1 10.0.24.305 and potentially earlier contain a critical vulnerability that allows unauthenticated attackers to achieve remote code execution through insecure deserialization in report processing functionality. The vulnerability exists due to improper input...
EUVD-2024-48887
Malicious code in bioql PyPI...
EUVD-2024-48237
Malicious code in bioql PyPI...
EUVD-2024-48238
Malicious code in bioql PyPI...
EUVD-2024-48236
Malicious code in bioql PyPI...
EUVD-2024-43993
Malicious code in bioql PyPI...
EUVD-2024-47441
Malicious code in bioql PyPI...
EUVD-2025-1753
Malicious code in bioql PyPI...
Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
Exploit Title: Progress Telerik Report Server 2024 Q1 10.0.24.305 - Authentication Bypass Fofa Dork: title="Telerik Report Server" Date: 2024-09-22 Exploit Author: VeryLazyTech GitHub: https://github.com/verylazytech/CVE-2024-4358 Vendor Homepage: https://www.telerik.com/report-server Software...
CVE-2025-0556
In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...
Progress Telerik Report Server < 11.0.25.211 Cleartext Transmission
The version of Progress Telerik Report Server installed on the remote host is affected by an cleartext transmission vulnerability. In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive...
CVE-2025-0556
In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...
CVE-2025-0556
In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...
CVE-2025-0556 Telerik Report Server Clear Text Transmission of Agent Commands
In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...
CVE-2025-0556
In Progress Telerik Report Server, before 2025 Q1 (11.0.25.211) using the older .NET Framework implementation, the communication of non-sensitive information between the service agent process and the app host process happens over an unencrypted tunnel, exposing it to potential local network traff...
CVE-2024-7295
In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...