Mat Rollings

4 exploits Active since Feb 2021
CVE-2020-28243 NOMISEC HIGH WORKING POC
SaltStack Salt < 3002.5 - Command Injection via Crafted Process Name
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.
18 stars
CVSS 7.8
CVE-2022-25046 WRITEUP CRITICAL WORKING POC
Control WebPanel < 0.9.8.1124 - Path Traversal and Remote Code Execution via loader.php
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.
CVSS 9.8
CVE-2022-25047 WRITEUP MEDIUM WORKING POC
Control WebPanel v0.9.8.1126 - Use of Insufficiently Random Values in Password Reset Token
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.
CVSS 5.9
CVE-2022-25048 WRITEUP HIGH WORKING POC
Control WebPanel 0.9.8.1126 - Authenticated OS Command Injection
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVSS 8.8