exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Florian Stuhlmann

HASOMED Elefant / Elefant Software Updater Data Exposure / Privilege Escalation

Posted Nov 11, 2024

Authored by Daniel Hirschberger, Florian Stuhlmann | Site sec-consult.com

HASOMED Elefant versions prior to 24.04.00 and Elefant Software Updater versions prior to 1.4.2.1811 suffer from having an unprotected exposed firebird database, unprotected FHIR API, multiple local privilege escalation, and hardcoded service password vulnerabilities.

tags | exploit, local, vulnerability

advisories | CVE-2024-50588, CVE-2024-50589, CVE-2024-50590, CVE-2024-50591, CVE-2024-50592, CVE-2024-50593

SHA-256 | 08569aaf8d9ee2326579f45288b32f5dc1f2f9623687358b993634b1d5424d28

Download | Favorite | View

HAWKI 1.0.0-beta.1 XSS / File Overwrite / Session Fixation

Posted May 28, 2024

Authored by Thorger Jansen, Florian Stuhlmann | Site sec-consult.com

HAWKI version 1.0.0-beta.1 before commit 146967f suffers from cross site scripting, arbitrary file overwrite, and session fixation vulnerabilities.

tags | exploit, arbitrary, vulnerability, xss

advisories | CVE-2024-25975, CVE-2024-25976, CVE-2024-25977

SHA-256 | dfca73f84c2fb3bf8edc1b2f48f75be2dbaaae19ce18c9d800d8ca4a7c98f67a

Download | Favorite | View