CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Local File Inclusion LFI via Improper URL Handling in Real-Browser monitor Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the...

CVE-2020-23934

CVE-2020-23934 References 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...

CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - Authentication Bypass CVE: CVE-2021-40903 Date: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Exploit Author: CQR.company / Vulnz. Vendor Homepage: https://github.com/anselal/antminer-monitor,...

commvault-cve2025-34028-check

infra-monitor infra-monitor is a lightweight Nmap NSE script for silently testing response consistency across web infrastructure routes. It helps detect anomalies in access control, configuration discrepancies, or potential inconsistencies in how different endpoints respond. This tool is designed...

CVE-2025-67399

CVE-2025-67399 Vulnerability Summary The AIRTH Smart Home AQI Monitor uses a CB3S Bluetooth SoC based on the BK7231N chipset with Software version number: 2.1.17. By physically accessing the device and identifying the SoC, the exposed UART debug/programming pins were located using the publicly...

AgentWatcher

AgentWatcher AgentWatcher is a detection-based defense against indirect prompt injection in LLM agents. It first runs causal context attribution over untrusted context to find the most influential contexts, then applies a monitor LLM that classifies those contexts under explicit, customizable...

Monitorr 1.7.6m - Unauthenticated Remote Code Execution

Monitorr 1.7.6m is susceptible to a remote code execution vulnerability. Improper input validation and lack of authorization leads to arbitrary file uploads in the web application. An unauthorized attacker with web access to could upload and execute a specially crafted file, leading to remote cod...

CVE-2026-85803

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-85359

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-85333

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-83753

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-83771

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-416 and has a High base severity score of 8.8. No specific exploit details or direc...

CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

CVE-2026-85333

A race condition exists in the Windows Performance Monitor due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

CVE-2026-93294

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-109896

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Monitor integration for WooCommerce: from n/a through 1.0.3...

CVE-2026-93294

The Azure Monitor data source contains a vulnerability where a user with query access can leverage its resource proxy as an unintended proxy. This allows the user to call Azure Resource Manager APIs beyond the scope required by Grafana , performing actions using the data source's Azure identity ....