1327 matches found
GHSA-6PMJ-XJXP-P8G9 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Summary A Boolean-Based Blind SQL Injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query without proper sanitization or parameter binding, allowing an attacker to manipulate the query...
CVE-2025-65093: Improper Neutralization of Special Elements used in an SQL Command
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...
PT-2025-49087
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mptcp pm del add timer function, which can lead to a race condition. Specifically, the function may call sk stop timer sync while another process ...
PT-2025-47406
Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 25.11.0 Description LibreNMS contains a boolean-based blind SQL injection issue in the /ajax output.php endpoint. The hostname parameter is directly interpolated into an SQL query without proper sanitization, allowin...
EUVD-2025-178226
Malicious code in kappa-encrypt-public-rho-boolean npm...
Malicious code in final-daemon-route-boolean-permission (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8334b78cd08ab5b888c2e351b37dd8221311c010e1d1b12e973d3ac9d0367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176237
Malicious code in stack-authenticate-boolean-compile-kappa npm...
EUVD-2025-175752
Malicious code in user-boolean-info-decode-try npm...
EUVD-2025-177019
Malicious code in promise-dog-link-authorize-boolean npm...
EUVD-2025-176537
Malicious code in sandbox-hot-cron-query-boolean npm...
EUVD-2025-177886
Malicious code in meta-boolean-analyze-decode-cloud npm...
EUVD-2025-178027
Malicious code in long-boolean-table-compress-tree npm...
EUVD-2025-179620
Malicious code in compress-async-rho-boolean-assert npm...
EUVD-2025-179139
Malicious code in encrypt-cloud-boolean-double-mock npm...
EUVD-2025-178904
Malicious code in final-daemon-route-boolean-permission npm...
EUVD-2025-178899
Malicious code in finally-function-boolean-refactor-runtime npm...
EUVD-2025-180439
Malicious code in analyze-boolean-pipe-import-epsilon npm...
EUVD-2025-180313
Malicious code in assert-alpha-boolean-awk-mock npm...