PT-2016-4134

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions prior to 10.0p100 Description A directory traversal issue allows remote authenticated users to read arbitrary files by crafting a URL. Recommendations For versions prior to 10.0p100,...

Idera Uptime Infrastructure Monitor Remote Detection

Detection of installed version of Idera Uptime Infrastructure Monitor. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress File Monitor Plugin - Cross Site Scripting (XSS)

This plugin is prone to a XSS vulnerability, because the "updateoptions" function doesn’t do any sanitization. Solution Update the plugin...

WordPress File Monitor - Stored Cross-Site Scripting (XSS)

The wordpress-file-monitor WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress File Monitor Plugin - Cross Site Scripting (XSS)

This plugin is prone to a XSS vulnerability, because the "updateoptions" function doesn’t do any sanitization. Solution Update the plugin...

SolarWinds Storage Resource Monitor Profiler Server RulesMetaData addNewRule SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RulesMetaData's addNewRule method which is reachable through t...

New Relic: Html injection in monitor name textbox

Hello guys, Details: Encoded image tag via HTML-Encoding is executed in Monitot failed email Payload: Plain text: Encoded: PoC: F100855 Remediation: Before sending an email - make sanitization / filtering / encoding of whole special characters. If you have any question, plz let me know Thanks, St...

PT-2016-6217 · Red Hat +3 · Ceph +3

Name of the Vulnerable Software and Affected Versions: Ceph affected versions not specified Description: The issue allows remote authenticated users to cause a denial of service, resulting in a segmentation fault and ceph monitor crash. This can be achieved by sending an empty or crafted prefix t...

F5 BIG-IP - Custom monitor privilege escalation vulnerability CVE-2016-5020

A user role assigned the Resource Administrator is capable of a privilege escalation which allows through the use of malicious external EAV monitor scripts to modify user accounts. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

Code injection

The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-8268

The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-8268

CVE-2015-8268 affects the Idera Up.time Infrastructure Monitor Linux agent (versions 7.5 and 7.6). The vulnerability allows remote, unauthenticated attackers to read arbitrary files accessible to the uptime.agent, via unspecified vectors. This information disclosure can enable an attacker to acce...

CVE-2015-8268

The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-8268: Exposure of Sensitive Information to an Unauthorized Actor

The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors...

PT-2016-3873

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor versions 7.5 through 7.6 Description The issue allows remote attackers to read arbitrary files. Recommendations For Idera Uptime Infrastructure Monitor versions 7.5 through 7.6, at the moment, there is no...

F5 Networks BIG-IP : Custom monitor privilege escalation vulnerability (K00265182)

F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification EAV monitor script. CVE-2016-5020 Impact An attacker may be able to use a...

IBM Security Guardium Database Activity Monitor Information Disclosure Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in IBM Security Guardium Database...

WifiChannelMonitor - Monitor APs and Wifi clients on selected channel (Monitor Mode) for Window

WifiChannelMonitor is a utility for Windows that captures wifi traffic on the channel you choose, using Microsoft Network Monitor capture driver in monitor mode, and displays extensive information about access points and the wifi clients connected to them. WifiChannelMonitor also allows you to vi...

F5 Networks BIG-IP : OpenSSH vulnerabilities (K17263)

CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to...

New Relic: Blind SSRF on synthetics.newrelic.com

Introduction It was possible to retrieve some data from the http://169.254.169.254/latest/ URL corresponding to the amazon instance metadatas. With more time, we can dump the whole content. PoC When creating a Ping Monitor on the https://synthetics.newrelic.com/accounts/XXXXXXX/synthetics URL, it...