235 matches found
CVE-2018-9276
CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Improved version of an exploit written by https://github.com/M4LV0. I used the POST data from their script but just made it more reliable as I didnt have much success with it...
CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure
PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547 Remote unauthenticated user can craft an HTTP request in /public/login.htm or /index.htm by providing the 'type' parameter. Example: http://127.0.0.1/public/login.htm?type=probes replace probes by any of the following to get diferent in...
CVE-2018-19410-POC
CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...
CVE-2023-22632
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...
CVE-2023-22631
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...
CVE-2023-22631
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...
EUVD-2023-60632
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...
CVE-2023-22632
PRTG Network Monitor (Paessler) before version 23.1.82 is affected by a vulnerability that allows remote attackers to write to files via the FTP Server Count Sensor . The attack requires high privileges (authenticated access) over the network, resulting in a low integrity impact (CVSS 3.1 score 2...
CVE-2023-22631
CVE-2023-22631 affects PRTG Network Monitor versions before 23.1.82 , allowing a remote attacker with high privileges to write to files via the HTTP XML/REST Sensor , resulting in a low integrity impact (CVSS 3.1: 2.7 LOW , AV:N/AC:L/PR:H). The Dutch NCSC advisory notes that an authenticated mali...
CVE-2023-22632
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...
EUVD-2023-60633
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...
PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276
Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: root@kitploit: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin201...
CVE-2018-9276
CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...
CVE-2020-23934
CVE-2020-23934 References 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...
CVE-2025-67835
Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...
CVE-2025-67834
Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...
CVE-2025-67833
Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...
PT-2026-2923
Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 25.4.114 Description An authenticated attacker can cause a Denial-of-Service DoS condition through the Notification Contacts functionality. Recommendations Update to version 25.4.114 or later...