114 matches found
CVE-2024-45714
Application is vulnerable to Cross Site Scripting XSS an authenticated attacker with users’ permissions can modify a variable with a payload...
CVE-2024-45714 SolarWinds Serv-U Stored XSS Vulnerability
Application is vulnerable to Cross Site Scripting XSS an authenticated attacker with users’ permissions can modify a variable with a payload...
CVE-2024-45714
CVE-2024-45714 refers to a Cross-Site Scripting (XSS) vulnerability in SolarWinds Serv-U. Connected sources indicate an authenticated user can modify a variable with a payload, potentially allowing browser-execution or data exposure within the victim’s context. Affected context is SolarWinds Serv...
BIT-GITLAB-2021-22186
An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 A PHP External Variable Modification vulnerab...
Exploit for PHP External Variable Modification in Juniper Junos
Note: !CAUTION ⚠️ Disclaimer: IMPORTANT: This script...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845-6 CVE-2023-36845 and CVE-2023-36846 Juniper Jun...
Exploit for PHP External Variable Modification in Juniper Junos
Automation for Juniper CVE:2023-36845 Overview is a bash sc...
PT-2023-32553 · Nessus · Nessus
Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: An issue exists where an authenticated attacker with privileges on the managing application could alter variables to overwrite arbitrary files on the remote host, potentially leading to a...
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 Usage? bash cve.sh yourfile.txt Referensi:...
Exploit for PHP External Variable Modification in Juniper Junos
Juniper Scanner Scanner for CVE-2023-36845 by bt0 More inform...
MTN Group: Remote code execution [CVE-2023-36845]
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series was discovered. The vulnerability allowed an unauthenticated, network-based attacker to control certain, important environment variables...
The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices allows a attacker to compromise data integrity.
The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices is related to a modification of the PHP external variable. Exploiting this vulnerability allows an attacker to compromise data integrity from a remote location...
CVE-2023-36845
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution...
CVE-2023-36844
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment...
Code injection
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution...
CVE-2023-36844
CVE-2023-36844 affects Juniper Junos OS on EX Series (J-Web) and enables an unauthenticated, network-based attacker to modify PHP environment variables, potentially causing partial integrity loss and enabling vulnerability chaining. Affected versions include multiple 20.4R3-S9 through 23.2R2 line...
CVE-2023-36844: PHP External Variable Modification
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment...
CVE-2023-36845
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution...