Categoria: remote

Trend Micro OfficeScan Remote Code Execution
10 10
Pubblicato in execution Nessun commento

Trend Micro OfficeScan Remote Code Execution

This Metasploit module exploits the authentication bypass and command injection vulnerability together. Unauthenticated users can execute a terminal command under the context of the web server user. The specific flaw exists within the management interface, which listens on TCP port 443 by default. The Trend Micro Officescan product has a widget feature which is implemented […]

The post Trend Micro OfficeScan Remote Code Execution appeared first on MondoUnix.

Supervisor XML-RPC Authenticated Remote Code Execution
25 09
Pubblicato in authenticated Nessun commento

Supervisor XML-RPC Authenticated Remote Code Execution

This Metasploit module exploits a vulnerability in the Supervisor process control software, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Depending on how supervisord has been configured, this may be root. […]

The post Supervisor XML-RPC Authenticated Remote Code Execution appeared first on MondoUnix.