Showing 1 - 6 of 6

Files from Cristiano Maruti

JBoss Seam 2 Remote Command Execution: Posted Aug 31, 2024; Authored by Cristiano Maruti, guerrino di massa | Site metasploit.com; JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. This Metasploit modules also has been tested successfully against IBM WebSphere 6.1 running on iSeries. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.; tags | exploit, java, remote, arbitrary; systems | linux, redhat; advisories | CVE-2010-1871; SHA-256 | e5fbbf205a52fd3db322ca559e03ddc183be3dbb1aecbc317c893104e8a8f598; Download | Favorite | View

Nokia Transport Module Authentication Bypass: Posted Feb 11, 2022; Authored by Cristiano Maruti; The TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected.; tags | exploit, web, bypass; advisories | CVE-2021-31932; SHA-256 | 0f05d6d716250f586c5ca2543716a3b108e48fdb98ec32ec187a2d7388c7a043; Download | Favorite | View

Tuleap 9.17.99.189 SQL Injection: Posted Mar 8, 2018; Authored by Cristiano Maruti; Tuleap version 9.17.99.189 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2018-7538; SHA-256 | abf9dc4b10bde4c99485e7fd62c3f706e483fa73c4cc8059c6f456ee999381d5; Download | Favorite | View

Aruba ClearPass Policy Manager 6.4 Cross Site Scripting: Posted May 27, 2015; Authored by Cristiano Maruti; Aruba ClearPass Policy Manager version 6.4 suffers from a stored cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2015-1389; SHA-256 | 56fc1e5abc70aa4b06bce984674df0bb39093a580845e17c217bedabcd24e62f; Download | Favorite | View

Network Solutions Webmail XSS / CSRF / Password Reset: Posted Apr 10, 2015; Authored by Cristiano Maruti; Network Solutions Webmail suffers from cross site scripting, cross site request forgery, password reset, information disclosure and various other security vulnerabilities.; tags | exploit, vulnerability, xss, info disclosure, csrf; SHA-256 | c559efb26add26a98a7159d6b6b66eef0951644e9d1df44a88ea79ae16873041; Download | Favorite | View

Barracuda Load Balancer ADC Key Recovery / Password Reset: Posted Jan 20, 2015; Authored by Cristiano Maruti; Barracuda Load Balancer ADC with firmware version 5.0.0.015 suffers from multiple security issues. There is an ability to recover the file system encryption keys via simil cold-boot attack, an off-line super user password reset via physical attack, hard-coded credential and hard-coded ssh key issues, and various other problems.; tags | advisory; advisories | CVE-2014-8426, CVE-2014-8428; SHA-256 | 5c42032507e2bcde6818fa49b6b98725db14f0fa3e856bb46af8de90d060d086; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days