263 matches found
CVE-2022-24716-2
CVE-2022-24716 Icinga Web 2 is an open source monitoring web interface, framework and command line interface. Unauthenticated users can leak the contents of user-accessible local system files from the web server, including icingaweb2 configuration files with database credentials. Installation Usa...
CVE-2022-24716
CVE-2022-24716 Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user,...
CVE-2022-24716
CVE-2022-24716 Icinga Web 2 は、コンピュータシステムとネットワークを監視するソフトウェアアプリケーションです。ユーザーがシステムリソースを表示および管理できるウェブインターフェースを備えています。しかし、Icinga Web 2 には、認証されていないユーザーがウェブサーバーユーザーがアクセス可能なシステム上のファイルにアクセスできるようにする脆弱性があります。これには、データベースの認証情報を含む Icinga Web 2 の設定ファイルも含まれます。この脆弱性は、Icinga Web 2 のバージョン 2.9.6 および 2.10...
CVE-2022-24715-go
CVE-2022-24715 The Icinga Web 2 exploit written in go. The original python code can be found in: https://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html...
CVE-2022-24715
Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9.6, 2.10 Remote command execution Reverse shell Usage root@kitploit: usage: exploit.py -h -u URL -U USER -P PASSWORD -i IP -p PORT Welcome. options: -h, --help show this help message and exit -u URL, --url URL Insert URL http://ipvictim...
CVE-2022-24716
CVE-2022-24716 Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...
CVE-2022-24716
CVE-2022-24716 Exploit per la vulnerabilità: Vulnerabilità di divulgazione arbitraria di file in Icinga Web 2 2.8.6, 2.9.6, 2.10 https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/ Aiuto: python3 exploit.py -h Esempio d'uso: python3 -u http://127.0.0.1:8080 -f /etc/pass...
CVE-2022-24715
CVE-2022-24715 Icinga Web 2 - Esecuzione Remota di Codice Autenticata 2.8.6, 2.9.6, 2.10 AVVISO: Questo script è realizzato per verificare la sicurezza dei sistemi. Utilizza questo script solo sui tuoi sistemi o su sistemi per cui hai ottenuto il permesso scritto di effettuare test...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
CVE-2026-42224 ipl/web is vulnerable to reflected XSS by malformed search requests
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to version 0.13.1, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no...
GHSA-55WF-5M3Q-6JJF ipl/web is vulnerable to reflected XSS by malformed search requests
Impact The vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. Patches Version 0.13.1 includes a fix for...
ipl/web is vulnerable to reflected XSS by malformed search requests
Impact The vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. Patches Version 0.13.1 includes a fix for...
PT-2026-37180
Name of the Vulnerable Software and Affected Versions Icinga Web versions prior to 0.13.1 Description An issue allows an attacker to inject malicious Javascript into a victim's browser to execute it within the context of Icinga Web. This occurs when a victim visits a specifically prepared website...
UBUNTU-CVE-2022-50942
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
CVE-2022-50942 Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListener
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
Icinga Web 2 跨站脚本漏洞
Icinga Web 2 is an open-source monitoring and measurement solution developed by Icinga. Version 2.8.2 of Icinga Web 2 contains a cross-site scripting vulnerability. This vulnerability stems from the icinga.min.js file, which has a client-side cross-site scripting vulnerability. It may lead to...
