Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-5241

Malware in sbrugna...

10CVSS6.4AI score0.63506EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/08/15 9:29 p.m.6 views

CVE-2011-10017

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS7.7AI score0.63506EPSS
Exploits0References1
NVD
NVD
added 2025/08/13 9:15 p.m.1 views

CVE-2011-10017

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS0.63506EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/08/13 8:53 p.m.5 views

CVE-2011-10017 Snort Report nmap.php/nbtscan.php RCE

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS0.63506EPSS
Exploits0References4
CVE
CVE
added 2025/08/13 8:53 p.m.19 views

CVE-2011-10017

Snort Report is vulnerable in versions prior to 1.3.2 due to improper sanitization in the nmap.php and nbtscan.php scripts. The vulnerability allows remote command execution via the target GET parameter with no authentication, potentially resulting in full system compromise. Public reports and CV...

10CVSS7.6AI score0.63506EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/08/13 8:53 p.m.1 views

CVE-2011-10017 Snort Report nmap.php/nbtscan.php RCE

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS7.6AI score0.63506EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2025/08/13 8:53 p.m.3 views

CVE-2011-10017

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS6.1AI score0.63506EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.3 views

PT-2025-33086 · Snort +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Snort versions prior to 1.3.2 Description: Snort Report versions prior to 1.3.2 contain a remote command execution issue in the nmap.php and nbtscan.php scripts. These scripts do not properly sanitize user input received through the target GE...

10CVSS7.1AI score0.63506EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.1 views

Snort Report 安全漏洞

Snort Report is an inspection report management system from the Snort team. A security vulnerability exists in Snort Report versions prior to 1.3.2 that stems from the nmap.php and nbtscan.php scripts not being cleaned of user input, which could lead to remote command execution...

10CVSS6.9AI score0.63506EPSS
Exploits0References5
Richard Bejtlich's blog
Richard Bejtlich's blog
added 2019/07/01 12:0 p.m.24 views

Reference: TaoSecurity Research

I started publishing my thoughts and findings on digital security in 1999. I used to provide this information on my Web site, but since I don't keep that page up-to-date anymore, I decided to publish it here. 2015 and later: Please visit Academia.edu for Mr. Bejtlich's most recent research. 2014...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Snort Report <= 1.3.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Snort Report = 1.3.2 SQL Injection Vulnerability Date: 29/01/2012 Author: a.kadir altan testpenterATgmail.com Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz Version: = 1.3.2 Platform: PHP Vulnerable parameter: ipAddress...

7.1AI score
Exploits0
Dsquare
Dsquare
added 2012/03/19 12:0 a.m.133 views

Snort Report 1.3.2 RCE

Remote command execution vulnerability in Snort Report nmap.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

1AI score
Exploits0References2
Packet Storm
Packet Storm
added 2012/02/06 12:0 a.m.15 views

Snort Report 1.3.2 Local File Inclusion

Exploit Title: Snort Report Local File Inclusion Date: 05/02/2012 Author: T0x!c Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz Version: = 1.3.2 Platform: PHP -= vuln c0de =- "/DB.php" 59 $file = join"", array"DB", $dbtype, ".php"; 60 require$file; ----exploit----...

7.4AI score
Exploits0
0day.today
0day.today
added 2012/01/31 12:0 a.m.17 views

Snort Report <= 1.3.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Snort Report &beginTime=0&endTime=1324665310 PoC:...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2012/01/31 12:0 a.m.11 views

Snort Report 1.3.2 - SQL Injection

Snort Report 1.3.2 - SQL Injection Exploit Title: Snort Report &beginTime=0&endTime=1324665310 PoC:...

8.6AI score
Exploits0
Exploit DB
Exploit DB
added 2012/01/31 12:0 a.m.24 views

Snort Report 1.3.2 - SQL Injection

Exploit Title: Snort Report &beginTime=0&endTime=1324665310 PoC:...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2012/01/30 12:0 a.m.24 views

Snort Report 1.3.2 SQL Injection

Exploit Title: Snort Report &beginTime=0&endTime=1324665310 PoC:...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2010/09/03 12:0 a.m.17 views

Snort Report < 1.3.2 nmap.php target Parameter Arbitrary Command Execution Vulnerability

Snort Report is prone to a vulnerability that lets attackers execute arbitrary code. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl CPE =...

10CVSS7.5AI score0.63506EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/09/03 12:0 a.m.9 views

Snort Report Detection (HTTP)

HTTP based detection of Snort Report. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100780";...

7.4AI score
Exploits0References1
OpenVAS
OpenVAS
added 2010/09/03 12:0 a.m.24 views

Snort Report Detection

This host is running Snort Report. Snort Report is an add-on module for the Snort Intrusion Detection System. It provides realtime reporting from the MySQL database generated by Snort. OpenVAS Vulnerability Test $Id: gbsnortreportdetect.nasl 5736 2017-03-27 13:36:24Z cfi $ Snort Report Detection...

7.2AI score
Exploits0References1
Rows per page
Query Builder