File-Read-CVE-2024-9264

File-Read-CVE-2024-9264 Grafana（CVE-2024-9264）におけるファイル読み取りの Proof of Concept（PoC） 前提条件 Viewer 権限以上の権限を持つ認証済み Grafana ユーザー DuckDB バイナリがインストールされ、Grafana の PATH からアクセス可能である必要があります 影響を受けるバージョン Grafana = v11.0.0（v11.x.y のすべてが影響を受けます） 使い方 root@kitploit: python3 poc.py --url --user --password --file 使用例...

CVE-2024-9264

CVE-2024-9264 root@kitploit: python CVE-2024-9264.py '' -u '' -p '' -c ''...

day05-grafana-sqlexpr-lab

5日目 – Grafana SQL Expressions → DuckDB LFI CVE-2024-9264 要約: 影響を受ける Grafana 11.x ビルドでは、ログインした Viewer が SQL Expressions を使用できます。 Grafana は式をサーバ上の DuckDB に転送します。readtext / readblob を使用して、 ローカルファイル（LFI）を読み取ることができます。フラグを /opt/flag.txt に配置します。 ビルド → 実行 root@kitploit: docker build -t day5-grafana...

CVE-2024-9264-in-Grafana-11.x

このリポジトリには README がありません。...

CVE-2024-9264

CVE-2024-9264 参考ドキュメント https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. 脆弱性の概要...

grafana-CVE-2024-9264

grafana-CVE-2024-9264 このリポジトリにはCVE-2024-9264に関する詳細が含まれています。また、脆弱性のあるgrafanaのバージョンもビルドしており、ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0からプルできます。...

CVE-2026-9264

creationtimestamp| type| source ---|---|--- 2026-07-23 12:33:12+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrctusfvqj2c...

Exploit for Code Injection in Grafana

CVE-2024-9264 CVE-2024-9264 취약점 실습 보고서 1. 취약점 요약 | 항목...

AlmaLinux 10 : kernel (ALSA-2026:9264)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:9264 advisory. kernel: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit CVE-2025-39766 kernel: scsi: qla2xxx: Fix improper freeing of purex item...

RHSA-2026:9264 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2024-9264 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2025-9264

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource...

CVE-2025-9264 Xuxueli xxl-job Jobs JobInfoController.java remove resource injection

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource...

Exploit for Code Injection in Grafana

CVE-2024-9264 Authenticated RCE in Grafana v11.0 via SQL Exp...

Exploit for Code Injection in Grafana

CVE-2024-92...

SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2025:01991-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01991-1 advisory. grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: - Security issues fixed: CVE-2025-4123: Fix cross-site scriptin...

Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: Security issues fixed: CVE-2025-4123: Fix cross-site scripting vulnerability bsc1243714. CVE-2025-22872: Bump golang.org/x/net/html bsc1241809 CVE-2025-3580: Prevent unauthorized...

Exploit for Code Injection in Grafana

🛠️ CVE-2024-9264 - Fixed Grafana RCE Exploit This is a fixe...

Exploit for Code Injection in Grafana

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code...

CVE-2019-9264

In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774502...