CVE-2024-29895.py

Cacti RCE - CVE-2024-29895 Verwendung: python3 cve-2024-29895.py -u https://target.com/ -c id Betrifft Cacti-Versionen 1.3.X auf DEV-Builds, in denen cmdrealtime.php vorhanden ist und POLLERID aktiviert ist. Eine Befehlseinschleusung ist über diesen Endpunkt möglich, indem eine GET-Anfrage mit de...

Linux Distros Unpatched Vulnerability : CVE-2024-29895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated us...

openSUSE 15 Security Update : cacti, cacti-spine (openSUSE-SU-2023:0025-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0025-1 advisory. - Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected...

Cacti 1.2.22 unauthenticated command injection

This module exploits an unauthenticated command injection vulnerability in Cacti through 1.2.22 CVE-2022-46169 in order to achieve unauthenticated remote code execution as the www-data user. The module first attempts to obtain the Cacti version to see if the target is affected. If LOCALDATAID...