433 matches found
CVE-2006-3392
CVE-2006-3392 About the vulnerability A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to...
CVE-2006-3392
CVE-2021-42913 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from...
Usermin 2.100 - Username Enumeration
Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...
CVE-2006-3392
It is a simple tool to exploit Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure . vulnerabilities How to use: 1-Run the script python exploit.py . 2-put the port . 3-Select the folder you want to view . ⛔ Important ⛔ We are not responsible for the use of this script in an unethical act...
CVE-2006-3392
CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...
CVE-2006-3392
CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...
Usermin 2.100 - Username Enumeration Detection
Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Usermin version 2.""" from...
Usermin Panel - Detect
Usermin panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Usermin panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Usermin Panel - Detect', 'description': 'Usermin panel was...
CVE-2023-40986
A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...
Exploit for Generation of Error Message Containing Sensitive Information in Webmin Usermin
No d...
ROS-20251105-05
Vulnerability of passwordchange.cgi script of Webmin hosting control panel and web-interface for unix-like systems Usermin is related to flaws in error reporting mechanism. unix-like systems Usermin is related to a flaw in the error reporting mechanism. Exploitation of the vulnerability could all...
EUVD-2004-0582
Malware in sbrugna...
EUVD-2007-3148
Malware in sbrugna...
EUVD-2014-3820
Malware in sbrugna...
EUVD-2016-5873
Malware in sbrugna...
EUVD-2009-4534
Malware in sbrugna...
EUVD-2005-3042
Malware in sbrugna...