Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

Usermin 2.100 - Username Enumeration

Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...

CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

Exploit for Generation of Error Message Containing Sensitive Information in Webmin Usermin

No d...

ROS-20251105-05

Vulnerability of passwordchange.cgi script of Webmin hosting control panel and web-interface for unix-like systems Usermin is related to flaws in error reporting mechanism. unix-like systems Usermin is related to a flaw in the error reporting mechanism. Exploitation of the vulnerability could all...

EUVD-2005-1180

Malware in sbrugna...

EUVD-2014-3820

Malware in sbrugna...

EUVD-2014-3821

Malware in sbrugna...

EUVD-2006-4236

Malware in sbrugna...

EUVD-2007-1273

Malware in sbrugna...

EUVD-2004-1462

Malware in sbrugna...

EUVD-2002-0748

Malware in sbrugna...

EUVD-2002-0749

Malware in sbrugna...

EUVD-2004-0587

Malware in sbrugna...

EUVD-2004-0558

Malware in sbrugna...

EUVD-2005-3042

Malware in sbrugna...

EUVD-2006-4530

Malware in sbrugna...

EUVD-2014-3861

Malware in sbrugna...

EUVD-2016-5873

Malware in sbrugna...

EUVD-2015-2190

Malware in sbrugna...