91 matches found
CVE-2023-50917
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
EUVD-2009-3520
Malware in sbrugna...
CVE-2024-33465
Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...
CVE-2024-33465
Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...
PT-2024-25273 · Majordomo · Majordomo
Name of the Vulnerable Software and Affected Versions: MajorDoMo versions prior to 0662e5e Description: The issue allows an attacker to escalate privileges via the thumb/thumb.php component. This is a Cross Site Scripting vulnerability. Recommendations: For versions prior to 0662e5e, update to...
CVE-2024-33465: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php component...
CVE-2024-33465
The open-source smart home automation platform MajorDoMo is vulnerable to Cross Site Scripting (XSS) in versions prior to v.0662e5e . The root cause lies within the thumb/thumb.php component, which allows an attacker to escalate privileges . To remediate this issue, users should update to version...
MajorDoMo Remote Code Execution Vulnerability
Introduction MajorDoMo, a beacon in Russian home automation and particularly favored by Raspberry Pi aficionados, has been a trusted name for over a decade. With over 380 stars on its official GitHub repository at the time of writing https://github.com/sergejey/majordomo, its popularity is eviden...
MajorDoMo Remote Code Execution
Introduction MajorDoMo, a beacon in Russian home automation and particularly favored by Raspberry Pi aficionados, has been a trusted name for over a decade. With over 380 stars on its official GitHub repository at the time of writing https://github.com/sergejey/majordomo, its popularity is eviden...
MajorDoMo Command Execution Vulnerability (CNVD-2024-0217529)
MajorDoMo is an open source DIY smart home automation platform from the MajorDoMo community. MajorDoMo suffers from a command execution vulnerability that stems from the file thumb.php failing to properly filter construct command special characters, commands, and more. An attacker can exploit thi...
CVE-2023-50917
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
Command injection
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
MajorDoMo 安全漏洞
MajorDoMo is an open source DIY smart home automation platform from the MajorDoMo community. MajorDoMo suffers from a command execution vulnerability that stems from the file thumb.php failing to properly filter construct command special characters, commands, and more. An attacker can exploit thi...
CVE-2023-50917: Improper Neutralization of Special Elements used in a Command
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
CVE-2023-50917
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
CVE-2023-50917
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
CVE-2023-50917
CVE-2023-50917 affects MajorDoMo (Major Domestic Module) prior to commit 0662e5e, allowing unauthenticated command execution via thumb.php shell metacharacters. Exploitation leads to OS command execution and potential full system compromise; patching guidance in connected documents: update MajorD...
SUSE CVE-2010-1190
thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as imgauth.php, does not check user permissions before providing scaled images, which allows remote attackers to bypass intended access restrictions and read private images via unspecified manipulations...
Mahara 20.04.x < 21.04.6, 21.10.x < 21.10.4, 22.04.x < 22.04.2 Information Disclosure Vulnerability
Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if...
