Jdexploit

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published and may be used. The vendor confirms: "The reported RCE and LFI vulnerabilities require authentication."

A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: "The reported RCE and LFI vulnerabilities require authentication."

A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip results in improper access controls. The attack may be performed from remote. The exploit has been made public and could be used. The vendor confirms: "The reported X-Real-Ip IP-bypass vulnerability has already been fixed".

**Nome do Software Vulnerável e Versões Afetadas** PHPGurukul Small CRM versão 4.0 **Description** Um problema existe no componente Login Success Handler dentro do arquivo `/crm/login.php`. A função `unserialize()` não processa adequadamente o argumento `geopluginURL`, resultando em desserialização. Isso permite que um invasor remoto inicie um ataque, embora a complexidade seja alta e a explorabilidade seja considerada difícil. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade. Como medida de mitigação temporária, restrinja o acesso ao endpoint `/crm/login.php` ou evite o uso do argumento `geopluginURL`.