CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Ejecución remota de código no autenticada https://vulners.com/cve/CVE-2022-24637 Ejemplo root@kitploit: python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

CVE-2022-24637

CVE-2022-24637 Unauthenticated RCE in Open Web Analytics version / newPassword YourIp YourPort It might be possible that you need to run it a few times to get a shell. The script can be improved...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

CVE-2022-24638

VISTO EN EXPLOITDB: https://www.exploit-db.com/exploits/51026 ESTA VERSIÓN ESTÁ CORREGIDA PARA EVITAR FALSOS NEGATIVOS CVE-2022-24637 Exploit para el RCE no autenticado en Open Web Analytics OWA 1.7.4. Este trabajo se basa en https://devel0pment.de/?p=2494. DESCARGO DE RESPONSABILIDAD: Este scrip...

CVE-2022-24637

CVE-2022-24637 — Open Web Analytics prior to 1.7.4 Defensive notes on a critical unauthenticated information-disclosure issue in Open Web Analytics OWA that can lead to privilege escalation. Encountered while working the Fruityloops box on echoCTF, which ran Open Web Analytics 1.7.3. Summary Fiel...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Exploit de Ejecución Remota de Código v2 Exploit funcional para Open Web Analytics 1.7.3 - RCE mejorado con el php reverse shell de pentestmonkey. Corregido el problema de no poder encontrar al usuario en la caché. El exploit original se puede encontrar...

CVE-2022-24637

Application vulnérable Open Web Analytics OWA avant la version 1.7.4 permet à un attaquant distant non authentifié d'obtenir des informations sensibles sur les utilisateurs, qui peuvent être utilisées pour obtenir des privilèges administrateur en exploitant les hachages de cache. Cela se produit...

CVE-2022-24637

CVE-2022-24637 Exploit para el RCE no autenticado en Open Web Analytics OWA 1.7.3. Este trabajo se basa en https://devel0pment.de/?p=2494. AVISO LEGAL: Este script está diseñado para auditar la seguridad de los sistemas. Utilice este script únicamente en sus propios sistemas o en sistemas en los...

CVE-2026-86810

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

EUVD-2026-74161

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

CVE-2026-86810

Open-Web-Analytics (up to 1.9.1) contains an improper authentication vulnerability in the checkCapabilityAndAuthenticateUser function within Core/Controller.php (Controller component). A remote, unauthenticated attacker can manipulate this function to bypass authentication checks. The CVSS 3.1 sc...

Malicious code in bigops-web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ba471d08385d30965c87d85316db28f34e4cd5f6f5eb20f5f9cedc33cd12bf On require, index.js loads helpers.js which selects a platform-specific endpoint and fetches an opaque binary payload from string-split-obfuscated...

MAL-2026-12858 Malicious code in bigops-web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ba471d08385d30965c87d85316db28f34e4cd5f6f5eb20f5f9cedc33cd12bf On require, index.js loads helpers.js which selects a platform-specific endpoint and fetches an opaque binary payload from string-split-obfuscated...

WordPress AWCA – The Great Analytics Insights for Your eStore plugin <= 3.12.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Advanced WC Analytics versions = 3.12.0...

CVE-2025-68032

Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through = 3.19.0...

PT-2026-21078

Name of the Vulnerable Software and Affected Versions Passionate Brains Advanced WC Analytics versions through 3.19.0 Description An authorization issue exists in Passionate Brains Advanced WC Analytics, allowing exploitation due to incorrectly configured access control security levels...

CVE-2021-2474

Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite component: Admin. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Analytics. Successful attack...

MAL-2025-191217 Malicious code in @everreal/web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c0514435a2fcfbbc44b6691737ce9fa17b0397b9cbd490173d9dca9fa18adc The package @everreal/web-analytics was found to contain malicious code. Source: ghsa-malware...