88 matches found
grafana-cve-2021-43798
grafana-cve-2021-43798 This repository contains files for reproducing the vulnerability. Deploy this in your cluster using this command. kubectl apply -f grafana-vuln-app.yaml...
CVE-2021-43798-poc
CVE-2021-43798-poc Grafana8.x 任意文件读取 python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...
CVE-2021-43798-mass_scanner
Grafana CVE 2021-43798 Grafana 未授权任意文件读取漏洞 CVE-2021-43798 依赖 root@kitploit: python3 -m pip install -r requirements.txt 或 pipenv install -r requirements.txt Dorks Dorks（Shodan | Google） Google Dorks Shodan Dorks 使用方法 目标末尾不带 /。且不带 http:// 或 https:// targets.txt 文件示例 root@kitploit: target.com...
grafana-exploit-CVE-2021-43798
grafana-exploit-CVE-2021-43798 关于 这个漏洞利用工具是用来做什么的 ？ 用于 Grafana 未授权任意文件读取漏洞 CVE-2021-43798 允许通过目录遍历访问本地文件 这个漏洞利用工具适用于哪些 Grafana 版本？ 适用于 Grafana 8.0.0-beta1 至 8.3.0 版本。 8.07、8.1.8、8.2.7 和 8.3.1 版本已修复。 操作系统兼容性 此漏洞利用工具针对 Linux 目标编写 免责声明 仅在获得网络所有者明确许可的情况下使用此漏洞利用工具 代码不得 用于违反法律 本项目的作者不对该代码的滥用负责 使用 语法...
CVE-2021-43798
启动实验室 docker compose up -d PoC： python3 CVE-2021-43798.py IP PORT 作者：https://www.linkedin.com/in/steven-guimaraes-29aa79212/...
Grafana-LFI-exploit
Grafana LFI 漏洞利用 针对 CVE-2021-43798 的更新版漏洞利用脚本，来自以下来源： https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 使用方法 1. 更新第 5 行（ip）和第 6 行（port）以适配目标。 2. 运行脚本 root@kitploit: python3 grafana-exploit.py...
CVE-2021-43798-Exploit-for-Windows-and-Linux
CVE-2021-43798-Exploit-for-Windows-and-Linux 针对 CVE-2021-43798 的修改版利用程序。 原始利用代码：https://www.exploit-db.com/exploits/50581 修改内容： 此修改版本兼容 Windows 和 Linux 底层服务器。 当用户输入绝对路径时（例如：C:\Windows\System32\drivers\etc\hosts），程序会将其转换为相对路径（Windows\System32\drivers\etc\hosts）。...
LabAutomationCVE-2021-43798
LabAutomationCVE-2021-43798 He creado un script para automatización de pentesting donde exploto CVE-2021-43798 un path traversal en Grafana para robar secretos de usuario clave SSH y luego obtener privilegios en un sistema Linux usando SUID. Automatizo este laboratorio para compartir la metodolog...
Exploit for Path Traversal in Grafana
CVE-2021-43798: Unauthenticated Directory Traversal in Grafana...
Exploit for Path Traversal in Grafana
CVE-2021-43798 - Grafana Arbitrary File Read Python toolkit f...
Exploit for Path Traversal in Grafana
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework...
Exploit for Path Traversal in Grafana
CVE-2021-43798 CVE-2021-43798 is a high-severity path traversa...
EUVD-2025-43798
Malicious code in jaja-lapis59-sluey npm...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-43798link is external Grafana Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses...
CVE-2025-43798
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...
Linux Distros Unpatched Vulnerability : CVE-2021-43798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to...
Fedora: Security Advisory (FEDORA-2024-37a2b3fac5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-6b9aeecbe8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...