64 matches found
CVE-2024-28212
CVE-2024-28212 affects nGrinder prior to 3.5.9, where an outdated SnakeYAML version enables unsafe deserialization that could let a remote attacker run arbitrary code. The vulnerability stems from deserializing untrusted data via SnakeYAML within nGrinder’s stack. Affected software: nGrinder vers...
CVE-2024-28212
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization...
CVE-2024-28211
nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...
CVE-2024-28211
nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...
CVE-2024-28211
CVE-2024-28211 affects nGrinder prior to 3.5.9. It allows a remote attacker to connect to a malicious JMX/RMI server by default, potentially enabling arbitrary code execution via the RMI registry. Red Hat/NVD entries corroborate a default-JMX/RMI connection leading to remote code execution. Impac...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in nGrinder versions prior to 3.5.9 that stems from allowing unlimited latency settings, which could result in...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in nGrinder versions prior to 3.5.9 that stems from a lack of access control that allows an attacker to create...
PT-2024-22339 · Ngrinder · Ngrinder
Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue allows remote attackers to execute arbitrary code via unsafe Java objects deserialization. This is possible because the software accepts serialized Java objects from unauthenticated user...
PT-2024-22340 · Ngrinder · Ngrinder
Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue allows an attacker to set a delay without limitation, potentially causing a Denial of Service. This could be exploited by a remote attacker. Recommendations: For versions prior to 3.5.9,...
PT-2024-22341 · Ngrinder · Ngrinder
Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue is related to a lack of access control, allowing an attacker to create or update webhook configuration. This could lead to information disclosure and limited Server-Side Request Forgery...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in nGrinder versions prior to 3.5.9 that stems from a default permission to connect to a malicious JMX/RMI...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in nGrinder versions prior to 3.5.9, which stems from a vulnerability that could allow a remote attacker to...
PT-2024-22337 · Ngrinder · Ngrinder
Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue allows a connection to a malicious JMX/RMI server by default, potentially leading to the execution of arbitrary code via the RMI registry by a remote attacker. Recommendations: For...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in nGrinder versions prior to 3.5.9 that stems from a lack of access control and allows an attacker to obtain...
nGrinder Security Vulnerabilities
nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in versions prior to nGrinder 3.5.9 that stems from allowing the acceptance of serialized Java objects from...
PT-2024-22342 · Ngrinder · Ngrinder
Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue is caused by a lack of access control, allowing an attacker to obtain the results of webhook requests. This could lead to information disclosure and limited Server-Side Request Forgery...
ngrinder.642.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1183918 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2016-5060
Multiple cross-site scripting XSS vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 description, 2 email, or 3 username parameter to user/save...
CVE-2016-5060
Multiple cross-site scripting XSS vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 description, 2 email, or 3 username parameter to user/save...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 description, 2 email, or 3 username parameter to user/save...