CVE-2020-15901

In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys...

PT-2020-1258 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7.3 Description: The issue is related to the get user pages aka gup implementation in mm/gup.c and mm/huge memory.c, which does not properly consider the semantics of read operations when used for a...

net-snmp 5.7.3 - Unauthenticated Denial of Service Exploit

Exploit for linux platform in category dos / poc Exploit Title: net-snmp 5.7.3 - Unauthenticated Denial of Service PoC Exploit Author: Magnus Klaaborg Stubman Website: https://dumpco.re/blog/net-snmp-5.7.3-remote-dos Vendor Homepage: http://www.net-snmp.org/ Software Link:...

net-snmp 5.7.3 Denial Of Service

Full blog post: https://dumpco.re/blog/net-snmp-5.7.3-remote-dos Back in january I did some vulnerability research of net-snmp 5.7.3 and found some bugs. Here they are: VULN1 ====== First bug is remotely exploitable without knowledge of the community string, and leads to Denial of Service: echo -...

net-snmp 5.7.3 - (Unauthenticated) Denial of Service (PoC)

net-snmp 5.7.3 - Unauthenticated Denial of Service PoC Exploit Title: net-snmp 5.7.3 - Unauthenticated Denial of Service PoC Date: 2018-10-08 Exploit Author: Magnus Klaaborg Stubman Website: https://dumpco.re/blog/net-snmp-5.7.3-remote-dos Vendor Homepage: http://www.net-snmp.org/ Software Link:...

net-snmp 5.7.3 Unauthenticated Denial Of Service

Exploit Title: net-snmp 5.7.3 - Unauthenticated Denial of Service PoC Date: 2018-10-08 Exploit Author: Magnus Klaaborg Stubman Website: https://dumpco.re/blog/net-snmp-5.7.3-remote-dos Vendor Homepage: http://www.net-snmp.org/ Software Link:...

net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)

net-snmp 5.7.3 - Authenticated Denial of Service PoC / | | | / / | | -| || -| | | . | ||/ ||||| ||||||| | || 2018-10-08 NET-SNMP REMOTE DOS =================== Second bug is remotely exploitable only with knowledge of the community string in this case "public" leading to Denial of Service: echo -...

Cross site scripting

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting XSS vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL...

Google Urchin 5.7.3 Report.CGI Authorization Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26037/info Google Urchin is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain administrative access to the vulnerable application. This may lead to other attacks. Urchin 5.7.03 is...

op5 Monitor < 5.7.3 Multiple Vulnerabilities

The version of op5 Monitor hosted on the remote web server is earlier than 5.7.3. It is, therefore, affected by the following vulnerabilities: - The 'status/hostgroupgrid' script fails to properly sanitize user-supplied input to the 'itemsperpage' parameter, which could allow for a SQL injection...

op5 Monitor < 5.4.2, 5.5.x <= 5.7.3 Unspecified SQLi Vulnerability

op5 Monitor is prone to an unspecified SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...