CVE-2020-23934

CVE-2020-23934 Referencias 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...

CVE-2018-9276

CVE-2018-9276 PRTG 18.2.39 Inyección de Comandos Autenticada Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Versión mejorada de un exploit escrito por https://github.com/M4LV0. Usé los datos POST de su script pero lo hice más fiable porque no tuve mucho éxito con él. La entrega del...

CVE-2026-4638

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547 Un usuario remoto no autenticado puede crear una solicitud HTTP en /public/login.htm o /index.htm proporcionando el parámetro 'type'. Ejemplo: http://127.0.0.1/public/login.htm?type=probes Reemplace probes por cualquiera de los siguient...

EUVD-2026-85847

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2026-4638

PRTG Network Monitor versions before 26.2.120.1449 are vulnerable to plaintext password disclosure. The issue exists in a demo EXE/Script sensor that utilizes cscript.exe to multiply two integer parameters. If a non-numeric value is provided, cscript.exe generates a 'Type mismatch' runtime error ...

CVE-2026-4637

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

CVE-2026-4637

Paessler PRTG Network Monitor (versions before 26.2.120.1449 ) is vulnerable to a reflected Cross-Site Scripting (XSS) flaw. The issue occurs because the web interface returns an HTTP 403 "Forbidden Path" error page for non-existent resources ending in ".htm" and echoes the requested URL path int...

EUVD-2026-85840

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

CVE-2018-19410-POC

CVE-2018-19410-POC Prueba de concepto para la vulnerabilidad CVE-2018-19410 Detalles PRTG Network Monitor Versión: 18.2.39.1661 y anteriores Nivel de gravedad: Alto Impacto: Bypass de autenticación, Autorización inadecuada, Inclusión de archivos locales Vector de acceso: Remoto La vulnerabilidad...

CVE-2018-9276

CVE-2018-9276 CVE-2018-9276 PRTG 18.2.39 Reverse Shell soporte Python3 Dependencias Impacket versión python3 Netcat Msfvenom Uso root@kitploit: git clone https://github.com/A1vinSmith/CVE-2018-9276.git ./exploit.py -i targetIP -p targetPort --lhost hostIP --lport hostPort --user user --password...

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Ejecución remota de código en PRTG Network Monitor autenticado Basado en https://www.exploit-db.com/exploits/46527 Uso: simplemente edite manualmente el script para incluir su URL de destino, nombre de usuario de administrador y contraseña de la siguiente manera: root@kitploit: TARGET =...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...

CVE-2023-45858

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

CVE-2023-28148: Improper Neutralization of Input During Web Page Generation

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

CVE-2023-22631: Improper Neutralization of Argument Delimiters in a Command

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

CVE-2023-45858

CVE-2023-45858 is a directory traversal vulnerability in Paessler PRTG versions prior to 23.4.88.1429 , allowing an unauthenticated, remote attacker to read local files. The CVSS v3.1 score is 8.6 (HIGH) with a changed scope and high confidentiality impact , while integrity and availability are u...