CVE-2024-6670

CVE-2024-6670 PoC per la vulnerabilità di bypass dell'autenticazione tramite SQL injection in Progress Software WhatsUp Gold HasErrors CVE-2024-6670 Un'analisi delle cause alla radice della vulnerabilità è disponibile sul mio blog:...

CVE-2024-5009

CVE-2024-5009 : WhatsUp Gold SetAdminPassword Escalação de Privilégios Ferramenta CVEHunter para detecção e exploração de vulnerabilidades para CVE-2024-5009 com desempenho assíncrono. Instalação root@kitploit: git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -...

CVE-2024-4885

CVE-2024-4885 PoC per CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Esecuzione di codice remoto non autenticata CVE-2024-4885 Analisi Tecnica Un'analisi della causa principale della vulnerabilità è disponibile sul mio blog:...

CVE-2024-4883

CVE-2024-4883 PoC per CVE-2024-4883 Progress WhatsUp Gold WriteDatafile Esecuzione Remota di Codice non autenticata CVE-2024-4883 Analisi Tecnica Un'analisi delle cause profonde della vulnerabilità è disponibile sul mio blog:...

CVE-2024-5009

CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword विशेषाधिकार वृद्धि CVE-2024-5009 के लिए PoC इस भेद्यता का मूल कारण विश्लेषण मेरे ब्लॉग पर पाया जा सकता है: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ उपयोग root@kitploit: python3 CVE-2024-5009.py...

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65937

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content...

CVE-2026-65938

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

CVE-2026-65939

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65941

CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...

EUVD-2026-57267

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

EUVD-2026-57266

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

CVE-2026-65940 WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

CVE-2026-65940

WhatsUp Gold is affected in versions released before 2026.0.2. The issue stems from excessive file system permissions, enabling a privileged attacker to write arbitrary files to a web-accessible location on the host server. Remediation inferred: upgrade to 26.0.2 or later.