Expoit Files ≈ Packet Storm

Exploit Files ≈ Packet Storm

Packet Storm – Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

BMD BMDWeb 2.0 Cross Site Scripting

22 April 2021, 3:41 pm

BMD BMDWeb 2.0 versions prior to 24.01.21 suffer from persistent cross site scripting vulnerabilities.

Packed.Win32.Black.d Unauthenticated Open Proxy

22 April 2021, 3:34 pm

Packed.Win32.Black.d malware has an unauthenticated open proxy vulnerability.

OTRS 6.0.1 Remote Command Execution

22 April 2021, 3:32 pm

OTRS version 6.0.1 remote command execution exploit.

Backdoor.Win32.DarkKomet.artr Insecure Permissions

22 April 2021, 3:32 pm

Backdoor.Win32.DarkKomet.artr malware suffers from an insecure permissions vulnerability.

Trojan-Dropper.Win32.Agent.xtp Insecure Permissions

22 April 2021, 3:31 pm

Trojan-Dropper.Win32.Agent.xtp malware suffers from an insecure permissions vulnerability.

RemoteClinic 2.0 Cross Site Scripting

22 April 2021, 3:29 pm

RemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.

IM-Worm.Win32.Bropia.aa Insecure Permissions

22 April 2021, 3:23 pm

IM-Worm.Win32.Bropia.aa malware suffers from an insecure permissions vulnerability.

HEUR.Trojan.Win32.Generic Insecure Permissions

22 April 2021, 3:23 pm

HEUR.Trojan.Win32.Generic malware suffers from an insecure permissions vulnerability.

CMS Made Simple 2.2.15 Cross Site Scripting

22 April 2021, 3:22 pm

CMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.

GravCMS 1.10.7 Remote Command Execution

21 April 2021, 3:25 pm

This Metasploit module exploits an arbitrary configuration write/update vulnerability to achieve remote code execution. Unauthenticated users can execute a terminal command under the context of the web server user. Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in arbitrary YAML file creation or content change of existing YAML files on the system. Successfully exploitation of that vulnerability results in configuration changes, such as general site information change, custom scheduler job definition, etc. Due to the nature of the vulnerability, an adversary can change some part of the webpage, or hijack an administrator account, or execute operating system command under the context of the web-server user.

Nagios XI 5.7.3 Remote Code Execution

21 April 2021, 3:24 pm

This Metasploit module exploits an OS command injection vulnerability in includes/components/nxti/index.php that enables an authenticated user with admin privileges to achieve remote code execution as the apache user. Valid credentials for a Nagios XI admin user are required. This module has been successfully tested against Nagios XI 5.7.3 running on CentOS 7.

Cockpit CMS 0.11.1 NoSQL Injection / Remote Command Execution

21 April 2021, 3:12 pm

This Metasploit module exploits two NoSQL injection vulnerabilities to retrieve the user list and password reset tokens from the system. Next, the USER is targeted to reset their password. Then, a command injection vulnerability is used to execute the payload. While it is possible to upload a payload and execute it, the command injection provides a no disk write method which is more stealthy. Cockpit CMS versions 0.10.0 through 0.11.1, inclusive, contain all the necessary vulnerabilities for exploitation.