CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

CVE-2022-1040

CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin portal auth bypass and rce all in one script; The vulnerability affects Sophos Firewall v18.5 MR3 18.5.3 and older Mitigation: update to latest version asap https://support.sophos.com/support/s/article/KB-000043853?language=enUS to avoid...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

CVE-2021-32160

..| XSS to Privileged user |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Command Injection through the Webmin's File Manager feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Command Execution eXploit's C0de POC...

CVE-2021-32157

..| XSS to RCE CRON|.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. Vulnerability Description Webmin is a powerful web-based system administration tool, widely used on Unix systems. Due to a command injection vulnerability in the old parameter during the processing of...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

CVE-2019-15107

CVE-2019-15107 This is information about the CVE-2019-15107 Webmin vulnerability, including building a server and recording attack results...

webminscan

Webminscan Webmin Exploit Scanner CVE-2020-35606 CVE-2019-12840...

CVE-2012-2982

CVE-2012-2982 Exploit for CVE-2012-2982 CVE-2012-2982 is a vulnerability found in Webmin version 1.580, and allows for remote code execution...

Webmin <1.990 - Improper Access Control

Webmin before 1.990 is susceptible to improper access control in GitHub repository webmin/webmin. This in turn can lead to remote code execution, by which an attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without enterin...

Webmin <1.997 - Authenticated Remote Code Execution

Webmin before 1.997 is susceptible to authenticated remote code execution via software/apt-lib.pl, which lacks HTML escaping for a UI command. An attacker can perform command injection attacks and thereby execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Webmin_Exploit_reverse_shell

ntroduction: The Webmin Exploit is a targeted exploit for the Webmin service, which can be exploited on older versions of Webmin. This exploit uses various techniques to execute malicious code and gain unauthorized access to the target system. It involves: Using both C and Assembly code to execut...

THM-Source-CVE-2019-15231

THM-Source-CVE-2019-15231 A write up on the TryHackMe room Source & a python script to exploit the vulnerability CREDITS I dont take any credits for the discovery of this vulnerabilty. Thank you to the following people for providing the resources so people like me can learn! Vulnerability...

CVE-2026-49243

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...

CVE-2026-49243 Webmin: Reflected XSS in the Configuration module

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...

EUVD-2026-88975

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XSS vulnerability that could be used to execute attacker-controlled commands. This issue has been patched in version...