329 matches found
InfluxDB-Exploit-CVE-2019-20933
InfluxDB Exploit CVE-2019-20933 Exploit für die InfluxDB CVE-2019-20933 Schwachstelle. InfluxDB vor Version 1.7.6 hat eine Authentifizierungsumgehungsschwachstelle in der authenticate-Funktion in services/httpd/handler.go, weil ein JWT-Token einen leeren SharedSecret auch als gemeinsames Geheimni...
CVE-2019-20933
CVE-2019-20933 InfluxDB prima della versione 1.7.6 ha una vulnerabilità di bypass dell'autenticazione nella funzione authenticate in services/httpd/handler.go perché un token JWT può avere uno SharedSecret vuoto noto anche come shared secret. vedi https://nvd.nist.gov/vuln/detail/CVE-2019-20933 p...
CVE-2019-20933
LAB 5-CVE-2019-20933 I. SYSTEMANALYSE Angriffsfläche identifizieren Beginnend mit dem, was in der Umgebung läuft. Ich liste alle aktiven Container auf: root@kitploit: docker ps Das Opfer gibt einen einzelnen Port frei:8086. Derzeit habe ich keine detaillierten Informationen über das Ziel. Aus der...
CVE-2024-30896
CVE-2024-30896 सारांश influxdb में एक व्यावसायिक तर्क दोष business logic flaw के कारण, जिन उपयोगकर्ताओं के पास मान्य allAccess टोकन होता है, वे वर्तमान प्राधिकरण टोकनों की सूची बनाकर अपने विशेषाधिकारों को operator स्तर तक बढ़ा सकते हैं। परिदृश्य हमलावर एक ऐसा उपयोगकर्ता हो सकता है जिसे किसी...
InfluxDB <1.7.6 - Authentication Bypass
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
GHSA-JFWF-28XR-XW6Q vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71309 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19. A patched version of the package is available...
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-25681 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-25681 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-42506 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-42506 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
