CVE-2019-14476

Mô tả

Tham khảo

• compass-security.com/fileadmin/Research/Advisories/2020-10_CSNC-2019-011_AdRem_NetCrunch_Server-Side_Request_Forgery_SSRF.txt · Exploit
• adremsoft.com/support · Vendor Advisory

Lỗ hổng khác của netcrunch

• CVE-2019-14481TRUNG BÌNH 5.4AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client. Successful exploitation requi…
• CVE-2019-14479CAO 8.8AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code …
• CVE-2019-14478TRUNG BÌNH 5.4AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client. The user's input data is not …
• CVE-2019-14483CAO 8.8AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys'…
• CVE-2019-14482NGHIÊM TRỌNG 9.8AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is…