[SECURITY] [DLA 2299-1] net-snmp security update

Package : net-snmp Version : 5.7.3+dfsg-1.7+deb9u2 Debian Bug : 965166 A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Upstream notes that: It is still possible to enable th...

EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-1814)

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects...

DLA-2299-1 net-snmp - security update

Bulletin has no description...

PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Author: AppleBois Version: 7xx ≤ 746 Homepage: https://pandorafms.org/ Software Link: https://sourceforge.net/projects/pandora/files/Pandora FMS 7.0NG/ CVE-2020-11749 By...

PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting

Exploit Title: PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting Date: 2020-07-01 Author: AppleBois Version: 7xx ≤ 746 Homepage: https://pandorafms.org/ Software Link: https://sourceforge.net/projects/pandora/files/Pandora FMS 7.0NG/ CVE-2020-11749 By asking network administrator to scan SN...

Autoenum - Automatic Service Enumeration Script

Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-18066)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID: CVE-2018-18066 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by an error in snmpoidcompare in snmplib/snmpapi.c. By sending a specially-crafted UDP packet, a remote attacker...

Amazon Linux 2 : net-snmp (ALAS-2020-1454)

The version of net-snmp installed on the remote host is prior to 5.7.2-48. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1454 advisory. snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticate...

Medium: net-snmp

Issue Overview: snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. CVE-2018-18066 Affected Packages: net-snmp...

Important Photon OS Security Update - PHSA-2020-3.0-0114

Updates of 'net-snmp', 'apache-tomcat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0114

Updates of 'apache-tomcat', 'net-snmp' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0308

Updates of 'sqlite-autoconf', 'apache-tomcat', 'net-snmp' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0308

An update of 'apache-tomcat', 'net-snmp', 'sqlite-autoconf' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2020-0262

Updates of 'net-snmp' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0262

An update of 'net-snmp' packages of Photon OS has been released...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

Cross site scripting

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

Pandora FMS 7.0 NG 746 Script Insertion / Code Execution Vulnerability

Pandora FMS 7.0 NG versions 746 and below remote code execution exploit that leverages cross site scripting. Requires administrator to perform an snmp scan with a cross site scripting payload. Exploit Title: PandoraFMS 7.0 NG ≤ 746 Remote Code Execution Date: July 2020 Author: AppleBois Version:...