Mat Rollings

4 exploits Active since Feb 2021
CVE-2020-28243 NOMISEC HIGH WORKING POC
Salt < 2015.8.10 - Command Injection
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.
18 stars
CVSS 7.8
CVE-2022-25046 WRITEUP CRITICAL WORKING POC
Webpanel < 0.9.8.1124 - Path Traversal
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.
CVSS 9.8
CVE-2022-25047 WRITEUP MEDIUM WORKING POC
CWP <0.9.8.1126 - Info Disclosure
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.
CVSS 5.9
CVE-2022-25048 WRITEUP HIGH WORKING POC
Webpanel - OS Command Injection
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVSS 8.8