xpgdgit

4 exploits Active since Jul 2014
CVE-2022-31793 NOMISEC HIGH WORKING POC
muhttpd < 1.1.7 - Path Traversal via Single-Character Prefix Bypass
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
1 stars
CVSS 7.5
CVE-2014-3120 NOMISEC HIGH WORKING POC
Elasticsearch < 1.2 - Remote Code Execution via Dynamic Scripting
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.
CVSS 8.1
CVE-2015-1427 NOMISEC CRITICAL WORKING POC
Elasticsearch <1.3.8, <1.4.3 - Command Injection
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVSS 9.8
CVE-2015-5531 NOMISEC WORKING POC
Elasticsearch <1.6.1 - Path Traversal
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.