CVE-2022-3653

Related Files

Syncovery For Linux Web-GUI Authenticated Remote Command Execution

Posted Dec 15, 2022

Authored by Jan Rude | Site metasploit.com

This Metasploit module exploits an authenticated command injection vulnerability in the Web GUI of Syncovery File Sync and Backup Software for Linux. Successful exploitation results in remote code execution under the context of the root user. Syncovery allows an authenticated user to create jobs, which are executed before/after a profile is run. Jobs can contain arbitrary system commands and will be executed as root. A valid username and password or a session token is needed to exploit the vulnerability. The profile and its log file will be deleted afterwards to disguise the attack. The vulnerability is known to work on Linux platforms. All Syncovery versions prior to v9.48j are vulnerable including all versions of branch 8.

tags | exploit, remote, web, arbitrary, root, code execution

systems | linux

advisories | CVE-2022-36534

SHA-256 | b41779b455720b7b8cb72926f609166a1f6c239f4d750374145be32ae680ed11

Download | Favorite | View

Debian Security Advisory 5261-1

Posted Oct 27, 2022

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5261-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.

tags | advisory, denial of service, arbitrary, info disclosure

systems | linux, debian

advisories | CVE-2022-3652, CVE-2022-3653, CVE-2022-3654, CVE-2022-3655, CVE-2022-3656, CVE-2022-3657, CVE-2022-3658, CVE-2022-3659, CVE-2022-3660, CVE-2022-3661

SHA-256 | fb62e0b11083a392fd6e63e6a0bc7e3e8840647b6a0494c1df81ebfbcf672e62

Download | Favorite | View