Showing 1 - 2 of 2

Files from Joel From Ndepthsecurity

First Active	2024-08-31
Last Active	2024-08-31

Roundcube TimeZone Authenticated File Disclosure: Posted Aug 31, 2024; Authored by stonepresto, Joel From Ndepthsecurity, thomascube | Site metasploit.com; Roundcube Webmail allows unauthorized access to arbitrary files on the hosts filesystem, including configuration files. This affects all versions from 1.1.0 through version 1.3.2. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. Tested against version 1.3.2.; tags | exploit, arbitrary; advisories | CVE-2017-16651; SHA-256 | 30dc475bf43282bac1e99e21e703821abb68a948837e1f171f2089ec7b6e01b0; Download | Favorite | View

MinIO Bootstrap Verify Information Disclosure: Posted Aug 31, 2024; Authored by Joel From Ndepthsecurity, RicterZ | Site metasploit.com; MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD, resulting in information disclosure. Verified against MinIO 2023-02-27T18:10:45Z.; tags | exploit, info disclosure; advisories | CVE-2023-28432; SHA-256 | fb21fcf11c3d2cc9d4a65fdb450fc6a33543e76a9c3e7ab73a7138c4ab9c1005; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days