hap-wi

4 results · Clear filters · Feed

• Critical 10.0
  CVE-2022-31161 Public exploit EPSS 29%

  Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

  Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py fil…

  hap-wi roxy-wi
  Jul 15, 2022
• Critical 10.0
  CVE-2022-31137 Public exploit EPSS 91%

  Unauthenticated Remote Code Execution in Roxy-WI

  Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing t…

  hap-wi roxy-wi
  Jul 8, 2022
• Critical 10.0
  CVE-2022-31126 Public exploit EPSS 53%

  Unauthenticated Remote Code Execution in Roxy-wi

  Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. Thi…

  hap-wi roxy-wi
  Jul 6, 2022
• Critical 10.0
  CVE-2022-31125 Public exploit EPSS 20%

  Authentication Bypass in Roxy-wi

  Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTT…

  hap-wi roxy-wi
  Jul 6, 2022