NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Metasploit Module InfoBlox Network Automation OS Command Injection Metasploit Module Product: Network Automation NetMRI Switch Port Manager Automation Change Manager Security Device Controller Vendor: InfoBlox Vulnerable Versions: 6.4.X.X-6.8.4.X Tested Version: 6.8.2.11 CV...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

CVE-2018-6643

CVE-2018-6643 CVE-2018-6643 Infoblox NetMRI 7.1.1 hxxp::/xxx.abc/api/docs/index.php?query=555"...

Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request

An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur. id: CVE-2025-32813 info: name: Infoblox NetMRI 7.6.1 - Unauthenticated Command Injection in getsamlrequest author: iamnoooob,pdresearch severity: high description: | An issue was discovere...

NetMRI Unauthenticated SQL Injection via skipjackUsername

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. id: CVE-2025-32814 info: name: NetMRI Unauthenticated SQL Injection via skipjackUsername author: iamnoooob,pdresearch severity: critical description: | An issue was discovered in Infoblox NETMRI befo...

NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials

An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. id: CVE-2025-32815 info: name: NetMRI 7.6.1 - Authentication Bypass via Hardcoded Credentials author: iamnoooob,pdresearch severity: medium description: | An issue was discovered i...

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit their website traffic and reputation with an aim to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain...

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of...

Infoblox NIOS Login Panel - Detect

Infoblox NIOS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Infoblox NIOS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Infoblox NIOS Login Panel - Detect',...

NetMRI Unauthenticated SQL Injection via skipjackUsername Detection

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in Infoblox NETMRI before 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

nautobot-ssot-aristacv (1.6.1), nautobot-ssot-infoblox (0.9.0) +1 more potentially affected by CVE-2025-62607 via nautobot-ssot (1.3.2)

nautobot-ssot PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-ssot-aristacv 1.6.1 - nautobot-ssot-infoblox 0.9.0 - nautobot-ssot-servicenow =0.9.0, =0.9.1 Source cves: CVE-2025-62607 Sour...

nautobot-ssot-aristacv (>=1.0.6, <=1.6.0), nautobot-ssot-infoblox (>=0.0.1.dev0, <=0.8.0) +3 more potentially affected by CVE-2025-62607 via nautobot-ssot (1.6.5)

nautobot-ssot PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-ssot-aristacv =1.0.6, =0.0.1.dev0, =0.0.3.dev0, =0.1.0, =0.1.4 Source cves: CVE-2025-62607 Source advisory: OSV:PYSEC-2026-16...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

CVE-2025-61880

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

CVE-2025-61880

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution...

CVE-2025-61880

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

CVE-2025-61880

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution...

PT-2026-7863

Name of the Vulnerable Software and Affected Versions Infoblox NIOS versions through 9.0.7 Description A user with high privileges can trigger an arbitrary file write through the account creation mechanism. Recommendations Update to a version later than 9.0.7...