1117 matches found
exploit-CVE-2020-5844
Exploit para CVE-2020-5844 Pandora FMS v7.0NG.742 - Ejecución remota de código ¿Te gusta este repo? ¡Danos una ⭐! Solo para fines educativos y de investigación de seguridad autorizada. Autor del exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la vulnerabilidad...
CVE-2024-11320
CVE-2024-11320 Exploit para la ejecución remota de código en Pandora FMS CVE-2024-11320...
Pandora FMS <=7.0NG.722 - Remote Code Execution
Pandora FMS versions =7.0NG.722 are vulnerable to unauthenticated remote code execution by chaining an unrestricted file upload CVE-2018-11221 and a local file inclusion CVE-2018-11222. An attacker can upload a malicious PHP file as a plugin and execute it via LFI, leading to full compromise of t...
CVE-2021-32099
poc : http://127.0.0.1:8888/pandoraconsole/include/chartgenerator.php?sessionid=%27%20union%20SELECT%201,2,%27idusuario|s:5:%22admin%22;%27%20as%20data%20--%20SgGO https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained...
CVE-2021-32099_SQLi
CVE-2021-32099 SQLi Bypass login Useful when trying to read User Flag on Pandora.htb CVE-2021-32099 SQLi allow attacker bypass login. Target Exploit on: Pandora FMS v7.0NG.742FIXPERL2020 Analysis Read from cvedetail. We know endpoint of target:...
CVE-2021-32099
CVE-2021-32099 CVE-2021-32099 POC : http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=a%27%20UNION%20SELECT%20%27a%27,1,%27idusuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessionsphp%20WHERE%20%271%27=%271 Deatil :...
CVE-2021-32099
CVE-2021-32099 pandora fms 742 sqli pre authentication POC root@kitploit: http://localhost/pandoraconsole/include/chartgenerator.php?sessionid=a' UNION SELECT 'a',1,'idusuario|s:5:"admin";' as data FROM tsessionsphp WHERE '1'='1 URL Encoded root@kitploit:...
pandorafms_7.44
Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE permite a un usuario autenticado lograr la ejecución remota de comandos a través de la funcionalidad de eventos. Se puede realizar con credenciales o una cookie de sesión PHP. Comenzando Ejecutando el programa Usando credenciales...
CVE-2021-32099
CVE-2021-32099 PoC Este repositorio proporciona un exploit de prueba de concepto PoC para la vulnerabilidad CVE-2021-32099 , que afecta a Pandora FMS 742. El exploit muestra cómo un atacante no autenticado puede aprovechar una vulnerabilidad de inyección SQL para elevar una sesión sin privilegios...
CVE-2022-45436
CVE-2022-45436 Cross-Site Scripting Reflejado que conduce al secuestro de sesión en pandorafms Exploit Title: Cross-Site Scripting Reflejado Date: 15/02/2023 Exploit Author: Damodar Naik Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: =...
CVE-2026-75531 Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora
Pandora contains a stored cross-site scripting XSS vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted directly into the inline JavaScript onclick handler used by the Submit to Lookyloo action. Although the value was subject to...
CVE-2026-34187
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30810
Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30807
Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30805
Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29512
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29495
Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29497
Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800...