1197 matches found
GHSA-6PMJ-XJXP-P8G9 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Summary A Boolean-Based Blind SQL Injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query without proper sanitization or parameter binding, allowing an attacker to manipulate the query...
PT-2025-47406
Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 25.11.0 Description LibreNMS contains a boolean-based blind SQL injection issue in the /ajax output.php endpoint. The hostname parameter is directly interpolated into an SQL query without proper sanitization, allowin...
CVE-2025-65093: Improper Neutralization of Special Elements used in an SQL Command
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...
EUVD-2025-180004
Malicious code in boolean-fork-uglify-dog-sanitize npm...
EUVD-2025-177886
Malicious code in meta-boolean-analyze-decode-cloud npm...
EUVD-2025-180001
Malicious code in boolean-zeta-fire-omega-lambda npm...
EUVD-2025-175752
Malicious code in user-boolean-info-decode-try npm...
EUVD-2025-178899
Malicious code in finally-function-boolean-refactor-runtime npm...
EUVD-2025-180003
Malicious code in boolean-reject-balance-sun-slow npm...
EUVD-2025-180002
Malicious code in boolean-xml-encrypt-hash-enum npm...
EUVD-2025-176237
Malicious code in stack-authenticate-boolean-compile-kappa npm...
EUVD-2025-180313
Malicious code in assert-alpha-boolean-awk-mock npm...
EUVD-2025-178226
Malicious code in kappa-encrypt-public-rho-boolean npm...
EUVD-2025-180439
Malicious code in analyze-boolean-pipe-import-epsilon npm...
EUVD-2025-178027
Malicious code in long-boolean-table-compress-tree npm...
EUVD-2025-177019
Malicious code in promise-dog-link-authorize-boolean npm...
EUVD-2025-180144
Malicious code in bad-route-boolean-compress-float npm...
Malicious code in final-daemon-route-boolean-permission (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8334b78cd08ab5b888c2e351b37dd8221311c010e1d1b12e973d3ac9d0367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...