CVE-2018-9276

このリポジトリには README がありません。...

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

認証済みPRTGネットワークモニターのリモートコード実行 https://www.exploit-db.com/exploits/46527 に基づく 使用方法: スクリプトを手動で編集して、対象のURL、管理者ユーザー名、パスワードを以下のように設定します。 TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin2019" 次に、110行目で実行したい任意のコマンドを挿入します。逆シェルを即座にリスナーに接続するには、revshells.com...

PRTG Network Monitor Remote Code Execution (CVE-2018-9276)

A remote code execution vulnerability exists in PRTG Network Monitor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Metasploit Wrap-Up

MobileIron MDM Hessian-Based Java Deserialization RCE Our very own wvu-r7 has added exploits/linux/http/mobileironmdmhessianrce, which exploits an ACL bypass in MobileIron MDM products to execute a Java deserialization attack using a Groovy gadget against a Hessian based endpoint. CVE-2020-15505...

CVE-2018-9276

creationtimestamp| type| source ---|---|--- 2021-01-27 21:56:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/prtgauthenticatedrce.rb 2022-06-18 10:22:36+00:00| published-proof-of-concept| https://t.me/arm1tage/129 2025-02-04 15:42:20+00:00|...

Exploit for OS Command Injection in Paessler Prtg_Network_Monitor

CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection...

PRTG Network Monitor 18.2.38 Remote Code Execution

!/bin/bash echo -e "\n\e00;33m++ \e00m" echo -e "\e00;32m Authenticated PRTG network Monitor remote code execution \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Date: 11/03/2019 \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Author: https://github.com/M4LV0 [email protected]...

PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution Exploit

Exploit for windows platform in category web applications !/bin/bash echo -e "\n\e00;33m++ \e00m" echo -e "\e00;32m Authenticated PRTG network Monitor remote code execution \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Date: 11/03/2019 \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m...

PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution

PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution !/bin/bash echo -e "\n\e00;33m++ \e00m" echo -e "\e00;32m Authenticated PRTG network Monitor remote code execution \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Date: 11/03/2019 \e00m" echo -e "\e00;33m++ \e00m" echo -e...

PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution

!/bin/bash echo -e "\n\e00;33m++ \e00m" echo -e "\e00;32m Authenticated PRTG network Monitor remote code execution \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Date: 11/03/2019 \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Author: https://github.com/M4LV0 [email protected]...

CVE-2018-9276

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability both on the server and on devices by sending malformed parameters in sensor or...

CVE-2018-9276

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability both on the server and on devices by sending malformed parameters in sensor or...

CVE-2018-9276

CVE-2018-9276 affects Paessler PRTG Network Monitor (pre-18.2.39). An OS command injection can be triggered by an attacker who has administrative access to the PRTG System Administrator web console, via malformed parameters in sensor or notification management scenarios. This vulnerability could ...

PRTG Network Monitor < 18.2.39 Command Injection Vulnerability

PRTG Network Monitor is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PRTG Command Injection

Bugtraq, I Josh Berry discovered an authenticated command injection vulnerability in the Demo PowerShell notification script provided by versions of PRTG Network Monitor prior to 18.2.39. The PowerShell notifications demo script on versions of the application prior to 18.2.39 do not properly...