Lucene search
+L

3410 matches found

Packet Storm
Packet Storm
added 2025/12/08 12:0 a.m.221 views

📄 Cacti 1.2.29 Remote Command Execution

Proof of concept exploit that demonstrates how authenticated users with access to Graph Templates in Cacti can abuse RRD invocation parameters to write arbitrary PHP files, then trigger execution leading to remote command execution. Version 1.2.29 is affected...

8.8CVSS9.5AI score0.54024EPSS
SaveExploits10
SUSE CVE
SUSE CVE
added 2025/12/04 3:6 p.m.7 views

SUSE CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.8CVSS6.8AI score0.10941EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-66399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input- validation flaw in the SNMP device configuration...

8.8CVSS7.5AI score0.10941EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/02 6:15 p.m.13 views

CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.8CVSS0.10941EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/02 6:15 p.m.20 views

UBUNTU-CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.8CVSS6AI score0.10941EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/02 5:57 p.m.2 views

CVE-2025-66399 SNMP Command Injection leads to RCE in Cacti

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.7CVSS6.4AI score0.10941EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/02 5:57 p.m.86 views

CVE-2025-66399

Cacti (prior to 1.2.29) is affected by an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters (including newlines) that are stored verbatim in the database and later embedded into...

8.8CVSS6.4AI score0.10941EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
added 2025/12/02 5:57 p.m.7 views

EUVD-2025-200287

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.7CVSS6.3AI score0.10941EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/02 5:57 p.m.132 views

CVE-2025-66399 SNMP Command Injection leads to RCE in Cacti

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.7CVSS0.10941EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/02 5:57 p.m.9 views

CVE-2025-66399 SNMP Command Injection leads to RCE in Cacti

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.7CVSS6.7AI score0.10941EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/12/02 5:57 p.m.39 views

CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.8CVSS8.1AI score0.10941EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.8 views

PT-2025-48744

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.29 Description Cacti is a performance and fault management framework. A flaw exists in the SNMP device configuration functionality due to insufficient input validation. An authenticated Cacti user can provide crafte...

9CVSS6.3AI score0.10941EPSS
SaveExploits1References19
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.10 views

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.29 that...

8.8CVSS7.9AI score0.10941EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2008-0791

Malware in sbrugna...

5CVSS6.1AI score0.02216EPSS
SaveExploits1References19
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-4365

Malware in sbrugna...

7.5CVSS8.6AI score0.03227EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-3397

Malware in sbrugna...

8.8CVSS8.6AI score0.02686EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-5155

Malware in sbrugna...

7.5CVSS8.6AI score0.02275EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-4684

Malware in sbrugna...

8.8CVSS8.6AI score0.02256EPSS
SaveExploits2References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-4925

Malware in sbrugna...

3.5CVSS8.6AI score0.01914EPSS
SaveExploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-13268

Malware in sbrugna...

4.8CVSS5.5AI score0.01025EPSS
SaveExploits1References9
Rows per page
Query Builder