PT-2021-8567

Name of the Vulnerable Software and Affected Versions BMC Remedy Mid Tier version 9.1SP3 Description The system is affected by remote and local file inclusion due to a lack of restrictions on targeted files. This can lead to attacks such as system fingerprinting, internal port scanning, Server Si...

PayloadsAllTheThings

It is an offensive tool for Web Application Security and Pentest/CTF. The repository contains a list of useful payloads and bypass techniques. The primary CVE ID is not explicitly mentioned, but it appears to be a collection of various exploits and tools. The target product/service or framework i...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

Remote file inclusion

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

CVE-2021-32100

CVE-2021-32100 describes a remote file inclusion vulnerability in Artica Pandora FMS 742, exploitable by the lowest privileged user. Multiple connected sources (Red Hat, CNVD, NVD mirrors, CNVD/CNNVD variants) corroborate that Pandora FMS 742 is affected. The vulnerability targets Pandora FMS sof...

PT-2021-19667

Name of the Vulnerable Software and Affected Versions: Artica Pandora FMS version 742 Description: A remote file inclusion issue exists, which can be exploited by a user with the lowest privileges. Recommendations: For Artica Pandora FMS version 742, at the moment, there is no information about a...

CVE-2021-32100: Undefined Security Weakness

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

Artica Pandora FMS security vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote file inclusion vulnerability exists in Artica Pandora FMS version 742, which can be exploited by a least privileg...

Python security vulnerabilities

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability in Python stdlib ipaddress 3.10 and below allows unauthenticated, remote attackers to...

CVE-2021-28918

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs...

Vulnerability fixed in netmask

Netmask is a widely used component in various open source projects. This component contains a vulnerability. By incorrectly processing ipv4 addresses, attacks such as server-side request forgery SSRF, remote file inclusion RFI and local file inclusion LFI are made possible. The makers of Netmask...

netmask npm package vulnerable to octal input data

Overview netmask npm package is vulnerable to octal input data. This may lead to server-side request forgery, remote file inclusion, local file inclusion, and other vulnerabilities. Recommendation Upgrade to version 2.0.1 or later. References - GitHub Advisory - Researcher report...

PT-2021-17985 · Npm · Netmask

Name of the Vulnerable Software and Affected Versions: netmask npm package versions 1.0.6 and below netmask npm package versions 2.0.0 Description: The issue is related to improper input validation of octal strings in the netmask npm package, allowing unauthenticated remote attackers to perform...

SAP BusinessObjects Business Intelligence Platform SSRF Vulnerability (direct check)

Binary data sapbusinessobjectsintelligenceplatformcve-2020-6308.nbin...

Phpvuln - Audit Tool To Find Common Vulnerabilities In PHP Source Code

phpvuln is an open source OWASP penetration testing tool written in Python 3, that can speed up the the process of finding common PHP vulnerabilities in PHP code, i.e. command injection, local/remote file inclusion and SQL injection. Installation You can download phpvuln by cloning the Git...

vulhub

It is an offensive tool for Docker environments. The primary CVE ID is not explicitly mentioned, but the tool targets various vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and Oracle Java. The tool is designed to test and demonstrate vulnerabilities in these...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

MTN Group: 2x Remote file inclusion within your VMware Instances

Summary: 2x Remote file inclusion within your VMware Instances Hosts: nmc.vc.mtn.co.ug h28a.n1.ips.mtn.co.ug Steps To Reproduce: Navigate to the URLs given below, /etc/passwd will be displayed. https://nmc.vc.mtn.co.ug/eam/vib?id=/etc/passwd https://h28a.n1.ips.mtn.co.ug/eam/vib?id=/etc/passwd...