The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2015-3224-

CVE-2015-3224- just a stupid version for CVE-2015-3224, for web console. need to setup web server for pty.py...

CVE-2021-36563

CVE-2021-36563 – Multiple Stored and Reflected XSS Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 2.0.0p9 Attack type: Stored and Reflected XSS Solution: Update to Software Revision 2.0.0p10 or later Summary: The CheckMK management web console versions 1.5.0 to 2.0.0...

CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

cve-2020-24572

CVE-2020-24572 RaspAP 2.5의 includes/webconsole.php에서 문제가 발견되었습니다. 인증된 접근 권한을 사용하면, 공격자는 잘못 구성된사실상 제한이 없는 웹 콘솔을 이용하여 이 소프트웨어를 실행하는 기본 OS를 공격하고, 파일 업로드 및 코드 실행을 포함한 시스템 명령을 실행할 수 있습니다...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2024-28999

CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...

CVE-2026-42588

CVE-2026-42588 - Apache ActiveMQ Jolokia Remote Code Execution Exploit Severity : 🔴 High CVSS 4.0: 8.1 Vulnerability Type : CWE-94 — Code Injection Affected Versions : Apache ActiveMQ Prerequisites : Requires Web Console authentication credentials default admin:admin 📋 Table of Contents...

outlook-auto-register

Outlook Auto Register Microsoft Outlook 纯协议批量注册 · PerimeterX 打码 · Web 控制台 · 代理池 / 账号池 / 测活一体化 它解决什么 · 界面预览 · 快速开始 · 代理推荐 · 防封策略 · English · Tiếng Việt · Telegram 本仓库地址 ：lxf746/outlook-auto-register 本项目仅供学习与研究，不得用于商业违规用途。使用者需自行评估并遵守 Microsoft 服务条款，所产生的一切后果由使用者自行承担。 一句话 ：纯协议 Outlook 批量注册 + Web 控制台，...

CVE-2025-26054

CVE-2025-26054 CVE-2025-26054 Author: Rohan Deshpande Stored Cross Site Scripting Summary Stored XSS Cross-Site Scripting is a security vulnerability that occurs when an attacker injects malicious scripts into a web application, which are then stored on the server and served to users. When users...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...

[SECURITY] Fedora 45 Update: cockpit-367-1.fc45

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

[SECURITY] Fedora 43 Update: cockpit-367-1.fc43

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

[SECURITY] Fedora 44 Update: cockpit-367-1.fc44

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

[SECURITY] [DSA 6474-1] cockpit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6474-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...