24 matches found
CVE-2025-15616 Wazuh Agent and Manager OS Command Injection and Untrusted Search Path
Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR...
Zen-Ai-Pentest
Professional AI-Powered Penetration Testing Framework Autonomo...
EUVD-2006-5917
Malware in sbrugna...
CVE-2022-2059 Stored Cross Site-Scripting in Agent Manager
In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system...
The vulnerability of the ESX Agent Manager (EAM) extension, a management tool for VMware vCenter Server’s virtual infrastructure, arises from insufficient input data validation. This allows an attacker to read arbitrary files within the system.
The vulnerability of the ESX Agent Manager EAM extension, a management tool for VMware vCenter Server’s virtual infrastructure, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to read arbitrary files in the system by sending GET requests to po...
PT-2020-4191
Name of the Vulnerable Software and Affected Versions: VMware vCenter Server affected versions not specified Description: The issue is related to insufficient input validation in the ESX Agent Manager EAM extension of the VMware vCenter Server virtual infrastructure management tool. This allows a...
Acronis: SQL Injection in agent-manager
1.https://mc-beta-cloud.acronis.com/api/agentmanager/v2/unitconfigurations?name=update-schedule&nodata=false&tenantid=1590228&unit=atp-agent%27and%2F%2A%2A%2Fextractvalue%281%2Cconcat%28char%28126%29%2C%28select+database%28%29%29%29%29and%27...
DELTA - SDN Security Evaluation Framework
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
SDN Security Evaluation Framework: DELTA
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
Estate Agent Manager <= 1.3 - (default.asp) Login Bypass Vulnerability
No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-13...
Novell NetIQ Sentinel Agent Manager NQMcsVarSet ActiveX DumpToFile() Remote Code Execution
The remote host contains the NQMcsVarSet ActiveX control distributed with Novell NetIQ Sentinel Agent Manager. The installed control is reportedly affected by a remote code execution vulnerability with the DumpToFile method where it does not properly sanitize the path for a filename. This could...
Directory traversal
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname...
(0Day) Novell NetIQ Sentinel Agent Manager NQMcsVarSet DumpToFile Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell NetIQ. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the NQMcsVarSet...
PT-2014-5339
Name of the Vulnerable Software and Affected Versions NetIQ Sentinel affected versions not specified Description The issue allows remote attackers to create arbitrary files and consequently execute arbitrary code via a crafted pathname in the DumpToFile method in the NQMcsVarSet ActiveX control i...
CVE-2006-5934
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
CVE-2006-5934: Undefined Security Weakness
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
CVE-2006-5934
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
CVE-2006-5934
SQL injection vulnerability in Estate Agent Manager 1.3 and earlier affects admin/default.asp. The flaw allows remote attackers to execute arbitrary SQL commands via the UserName field, enabling potential data disclosure or modification. This is supported by the CVE/NVD entry (CVE-2006-5934) and ...
Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability
No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...
Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...