M/Monit 3.7.4 - Privilege Escalation

Title: M/Monit 3.7.4 - Privilege Escalation Author: Dolev Farhi Date: 2020-07-09 Vendor Homepage: https://mmonit.com/ Version : 3.7.4 import sys import requests url = 'http://youriphere:8080' username = 'test' password = 'test123' sess = requests.Session sess.gethost def login: print'Attempting t...

PT-2026-5160

Name of the Vulnerable Software and Affected Versions M/Monit version 3.7.4 Description An authenticated user can escalate privileges by manipulating the admin parameter. An attacker can send a crafted POST request to the /api/1/admin/users/update endpoint to grant administrative access to a...

CVE-2019-3775

Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user...

M/Monit 3.7.2 - Privilege Escalation

!/usr/env/python3 """ Vulnerability title: M/Monit = 3.7.2 - Privilege Escalation Author: Dolev Farhi Vulnerable version: 2.0.151021 Link: https://mmonit.com Date: 2/17/2019 """ import sys import requests MMONITURL = 'http://ip.add.re.ss:8080' MMONITUSER = 'monit' Default built in unprivileged us...

CVE-2018-18755: Improper Neutralization of Special Elements used in an SQL Command

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update usergroupid parameter or the admin/user/user/update userid parameter...

PT-2018-14629

Name of the Vulnerable Software and Affected Versions K-iwi Framework version 1775 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain endpoints. The vulnerable parameters are user group id in the "admin/user/group/update" endpoint and user id i...

K-iwi Framework 1775 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: K-iwi Framework 1775 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.k-iwi.com/ Software Link: https://sourceforge.net/projects/k-iwi/files/latest/download Version: 1775 Category: Webapps Tested on:...

K-iwi Framework 1775 - SQL Injection

Exploit Title: K-iwi Framework 1775 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.k-iwi.com/ Software Link: https://sourceforge.net/projects/k-iwi/files/latest/download Version: 1775 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

CVE-2018-18382

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" aka user/edit-profile action...

CVE-2018-18382

Advanced HRM 1.6 is affected by CVE-2018-18382, which enables Remote Code Execution via PHP code uploaded to a .php file at the user/update-user-avatar URI, accessible through the Update Profile/Change Picture flow (user/edit-profile). The issue is tied to the specific endpoint path used for upda...

CVE-2018-18382: Unrestricted Upload of File with Dangerous Type

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" aka user/edit-profile action...

PT-2018-14428

Name of the Vulnerable Software and Affected Versions Advanced HRM version 1.6 Description The issue allows for Remote Code Execution via PHP code in a .php file to the "user/update-user-avatar" URI. This can be accessed through an "Update Profile" "Change Picture" action, also known as...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15866)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "user update" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...

MySQL Smart Reports 1.0 - id SQL Injection Cross-Site Scripting

MySQL Smart Reports 1.0 - id SQL Injection Cross-Site Scripting Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

MyYoutube MyBB Plugin 1.0 - SQL Injection

No description provided by source. Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:Youtube Video intitle:Profile of Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube...

openSUSE Security Update : PackageKit (openSUSE-SU-2013:0381-1)

PackageKit was fixed to add a patch to forbid update to downgrade bnc804983 As the update operation is allowed for logged in regular users, they could install old package versions which might have been still affected by already fixed security problems. %NASLMINLEVEL 70300 C Tenable Network...

Atmail Webmail < 6.3.5 Multiple XSS Vulnerabilities

According to its version, the Atmail Webmail install on the remote host is a version prior to 6.3.5. It is, therefore, potentially affected by the following vulnerabilities : - An input validation error exists related to log search functionality and the 'range' and 'index' parameters. - An input...

SA-CONTRIB-2014-010 - Services - Access Bypass and Privilege Escalation

The Services module enables you to expose an API to third party systems using REST, XML-RPC or other protocols. User update access bypass vulnerability An authenticated user is able to assign additional roles to themselves, which means they can escalate their privileges by assigning an...

PHP-Nuke 8. x <= "chng_uid" blind defect and repair-vulnerability warning-the black bar safety net

Affected version: PHP-Nuke 8. x = Vulnerability description: PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features...

Invision Power Board Currency Mod 1.3 - edit SQL Injection

Invision Power Board Currency Mod 1.3 - edit SQL Injection Exploit Title: Invision Power Board Currency Modedit SQL injection Date: 17/04/2007 Author: Pr0T3cT10n Software Link: www.invisionpower.com Version: 1.3 Tested on: 1.3 CVE: Code: !/usr/bin/perl Invision Power Board Currency Modedit SQL...