cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 命令注入 CVE-2022-46169 漏洞应用 这是一个用于测试 Cacti 漏洞（CVE-2022-46169 ）利用的易受攻击应用。 警告！ 此应用包含严重的安全漏洞。运行风险自负！建议在备份且隔离的环境（如已创建近期快照并仅使用主机网络模式的虚拟机）中运行。请勿将此应用部署到任何面向互联网的服务器，否则它们将被攻破。 免责声明 ：本人对任何人使用此应用的方式概不负责。此应用的唯一用途是作为 CVE-2022-46169 漏洞利用的测试场景，不得恶意使用。如果您的服务器因安装此应用而被攻破，责任不在于我，而在于上传并安装它的人员。 漏洞信息 CVE-ID...

ATTACKdatamap

ATTACKdatamap Una evaluación de fuentes de datos a nivel de evento para mostrar la cobertura potencial del marco "MITRE ATT&CK". Esta herramienta ha sido desarrollada por mí y no tiene afiliación con "MITRE" ni con su excelente equipo "ATT&CK"; se ha creado con la intención de facilitar el mapeo ...

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. ➜ ./grafanaExp -h NAME: grafanaExp -...

CVE-2025-70829

CVE-2025-70829: Information Exposure in Datart 中文文档 1. Vulnerability Overview CVE ID : CVE-2025-70829 Product : Datart Version : v1.0.0-rc.3 Vulnerability Type : Information Exposure An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive dat...

CVE-2026-25212

CVE-2026-25212 – PoC de RCE en Percona PMM Crítico – CVSS 9,9 – Ejecución remota de código autenticada en PMM 3.7. Descripción Esta prueba de concepto explota una vulnerabilidad donde un usuario interno de PostgreSQL en PMM mantiene privilegios 'SUPERUSER'. Un atacante autenticado con derechos...

grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards

A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...

grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards

A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Implementación en Python de una herramienta para descifrar y cifrar datos sensibles en Grafana, abordando específicamente las vulnerabilidades asociadas con CVE-2021-43798. Grafana cifra todas las contraseñas de las fuentes de datos utilizando el algoritmo AES con la...

solr_exploit

Declaración Los métodos de detección de vulnerabilidades, archivos y demás contenidos proporcionados aquí están destinados exclusivamente para que los profesionales de seguridad los utilicen con autorización legal, con el objetivo de verificar la seguridad de los servidores autorizados. Los...

grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 en Grafana. Detecta automáticamente si hay vulnerabilidad, los plugins presentes, extrae claves, descifra el archivo de base de datos del servidor y muestra la información de datasource. Uso Proporciona las...

CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

Astra Linux – Vulnerability in libdbi-perl

A issue was discovered in the DBI module through version 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically specified via the fdir attribute in the data source name DSN. NOTE: This issue exists due to an incomplete fix for CVE-2014-10401...

EUVD-2026-92419

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-81841

A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...

Linux Distros Unpatched Vulnerability : CVE-2026-63277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such ...

PT-2026-104815

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

PT-2026-104814

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

Linux Distros Unpatched Vulnerability : CVE-2026-63268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local te...

grafana-ssrf

grafana-ssrf Authenticated SSRF in Grafana. Notes Azure metadata header has been added to all SSRFS Google metadata header has been added to all SSRFS SSRF will not follow redirects no matter what so ensure url is direct. If login is via SSO or other none grafana logins please grab your session...

Grafana Labs 11.6.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 Missing Authorization (CVE-2026-81841)

The version of Grafana Labs installed on the remote host is 11.6.x through 12.4.x prior to 12.4.12, or 13.0.x prior to 13.0.10, or 13.1.x prior to 13.1.7, or 13.2.x prior to 13.2.3. It is, therefore, affected by a missing authorization vulnerability: - Pausing a shared public dashboard did not...