48 matches found
CVE-2026-30480
CVE-2026-30480: LibreNMS のパストラバーサルによるローカルファイルインクルージョン(LFI) 概要 LibreNMS の NFSen モジュールにローカルファイルインクルージョン(LFI)の脆弱性が存在します。認証済みの攻撃者がパストラバーサルシーケンスを悪用して、サーバーのファイルシステムから任意の PHP ファイルをインクルードできる可能性があります。...
nfsen_1.3.7_CVE-2017-6971
Este repositorio no tiene un README...
nfsen-exploit
nfsen-exploit nfsen 1.3.7 における CVE-2017-6971 のリモートコマンド実行エクスプロイト。 Ubuntu でテスト済み。おそらくすべての環境で動作します。 脆弱性は Paul Taylor/Foregenix Ltd によって発見されました。 使用方法: python exploit.py これにより、リモートマシン上にルートレベルのシェルが生成されます。...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
The vulnerability of the NFS module in the network monitoring system LibreNMS allows a intruder to execute arbitrary code.
The vulnerability of the nfsen module in the LibreNMS network monitoring system is related to incorrect path name restrictions when processing the nfsen parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PHP file...
EUVD-2026-22251
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
Directory Traversal
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Directory Traversal via the nfsen parameter in the nfsen.inc.php file. An attacker can execute arbitrary PHP code by...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
CVE-2026-30480: Improper Control of Filename for Include/Require Statement in PHP Program
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
PT-2026-32629
Name of the Vulnerable Software and Affected Versions LibreNMS version 22.11.0-23-gd091788f2 Description A Local File Inclusion LFI issue exists in the NFSen module nfsen.inc.php. This occurs due to improper restriction of the directory path name when processing the nfsen parameter. An...
LibreNMS 安全漏洞
LibreNMS is an open-source network monitoring system developed by the LibreNMS community, based on PHP and MySQL. This system features custom alerts, automatic discovery of networks, and automatic updates. Version LibreNMS 22.11.0-23-gd091788f2 contains security vulnerabilities. These...
CVE-2026-30480
A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...
Exploit for CVE-2026-30480
CVE-2026-30480: LibreNMS Local File Inclusion LFI via Path T...
EUVD-2017-16008
Malware in sbrugna...
NfSen Command Injection Vulnerability
NfSen is a Web-based front-end for nfdump an open source netflow collection, storage, filtering, and statistical analysis tool. A security vulnerability exists in versions of NfSen prior to 1.3.8. A remote attacker can exploit the vulnerability to execute arbitrary operating system commands...
NfSen 1.3.7 / AlienVault OSSIM 4.3.1 customfnt Command Injection
Exploit Title: NfSen/AlienVault remote root exploit command injection in customfmt parameter Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault USM/OSSIM 4.3.1 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/...
NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
Exploit Title: NfSen/AlienVault remote root exploit command injection in customfmt parameter Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault USM/OSSIM 4.3.1 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/...