Rhino Security Labs

5 exploits Active since Apr 2018
CVE-2020-5377 EXPLOITDB CRITICAL python WORKING POC
Dell EMC OpenManage Server Administrator < 9.4 - Unauthenticated Path Traversal via Web API Request
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.
CVSS 9.1
CVE-2019-16116 EXPLOITDB MEDIUM python WORKING POC
EnterpriseDT CompleteFTP Server <12.1.3 - Info Disclosure
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.
CVSS 4.3
CVE-2018-1335 EXPLOITDB HIGH python WORKING POC
Apache Tika <1.18 - Command Injection
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.
CVSS 8.1
CVE-2019-5678 EXPLOITDB HIGH html WORKING POC
NVIDIA GeForce Experience < 3.19 - Code Execution via Web Helper Input Validation
NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.
CVSS 7.8
CVE-2024-55963 EXPLOITDB MEDIUM python WORKING POC
Appsmith RCE
An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request.
CVSS 6.5