Lucene search
+L

47 matches found

Kitploit
Kitploit
•added 2026/10/04 10:53 a.m.•13 views

NetAlertX

NetAlertX – Visibilidad de Red y Marco de Inteligencia de Activos !mainmain 📷 Haz clic para más capturas de pantalla !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

6.2AI score
SaveExploits0References3
Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•32 views

NetAlertX 23.01.14–24.x < 24.10.12 - Remote Code Execution

NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php. id: CVE-2024-46506 info: name:...

10CVSS7.6AI score0.62045EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/10/01 12:53 p.m.•13 views

CVE-2024-46506

CVE-2024-46506 Esta es una implementación independiente en Python para CVE-2024-46506. Creé este script porque solo pude encontrar el módulo de Metasploit y necesitaba una versión ligera y portátil que no requiriera el framework completo de Metasploit. Descargo de responsabilidad Esta herramienta...

10CVSS7.7AI score0.62045EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/02 3:00 a.m.•25 views

NetAlertX v26.9.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

6.2AI score
SaveExploits0References4
GithubExploit
GithubExploit
•added 2025/12/27 10:07 p.m.•306 views

Exploit for Missing Authentication for Critical Function in Netalertx

CVE-2024-46506 This is a standalone Python implementation for...

10CVSS6.9AI score0.62045EPSS
SaveExploits4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-16309

Malicious code in bioql PyPI...

10CVSS6.5AI score0.00579EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/06 10:21 p.m.•17 views

CVE-2025-48952

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS6.8AI score0.00574EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/04 11:15 p.m.•14 views

CVE-2025-48952

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS0.00574EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/04 10:12 p.m.•51 views

CVE-2025-48952

NetAlertX (pre-25.6.7) contains an authentication bypass vulnerability in the PHP login check. The issue arises from a loose comparison using the == operator in front/index.php (line 40), which allows specially crafted SHA-256 magic hashes to bypass password verification. Hash values starting wit...

9.4CVSS6.8AI score0.00574EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/04 10:12 p.m.•8 views

CVE-2025-48952 NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS7.5AI score0.00574EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•3 views

CVE-2025-48952: Incorrect Comparison

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS5.8AI score0.00574EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/04 12:00 a.m.•13 views

NetAlertX 安全漏洞

NetAlertX is a network intruder and presence detector from the individual developer of jokob-sk. A security vulnerability exists in NetAlertX versions prior to 25.6.7, which stems from a SHA-256 magic hash authentication bypass that could lead to login bypass...

9.4CVSS6.7AI score0.00574EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/06/07 12:00 a.m.•11 views

PT-2025-28025 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX versions prior to 25.6.7 Description: NetAlertX is a network, presence scanner, and alert framework. A vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes due to a loose...

9.4CVSS6.6AI score0.00574EPSS
SaveExploits1References16
RedhatCVE
RedhatCVE
•added 2025/05/29 10:49 p.m.•37 views

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS7AI score0.00579EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/27 10:15 p.m.•27 views

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS0.00579EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/27 9:59 p.m.•102 views

CVE-2025-32440

CVE-2025-32440 affects NetAlertX before version 25.4.14. An authentication bypass allows updating settings without authentication by crafting requests to /index.php, enabling exploitation of sensitive functions in util.php. The issue is confirmed as patched in version 25.4.14. Impact is described...

10CVSS9.6AI score0.00579EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/05/27 9:59 p.m.•38 views

CVE-2025-32440 NetAlertX Vulnerable to Authentication Bypass

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS0.00579EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/27 9:59 p.m.•12 views

CVE-2025-32440 NetAlertX Vulnerable to Authentication Bypass

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS6.9AI score0.00579EPSS
SaveExploits0References2
OSV
OSV
•added 2025/05/27 9:59 p.m.•13 views

CVE-2025-32440 NetAlertX Vulnerable to Authentication Bypass

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•1 views

CVE-2025-32440: Missing Authentication for Critical Function

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS5.7AI score0.00579EPSS
SaveExploits0References1
Rows per page
Query Builder