Exploit for Improper Input Validation in Cacti

This repository is a PoC exploit for CVE-2024-25641, a vulnerabi...

PT-2024-10486 · Cacti +1 · Cacti +1

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.29 Description: The issue concerns an open-source performance and fault management framework. An administrator can modify the Poller Standard Error Log Path parameter to point to a local file on the server, allowin...

Ubuntu: Security Advisory (USN-6969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Cacti vulnerabilities (USN-6969-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6969-1 advisory. It was discovered that Cacti did not properly apply checks to the Package Import feature. An...

USN-6969-1 cacti vulnerabilities

It was discovered that Cacti did not properly apply checks to the "Package Import" feature. An attacker could possibly use this issue to perform arbitrary code execution. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. CVE-2024-25641 It was...

USN-6969-1: Cacti vulnerabilities

It was discovered that Cacti did not properly apply checks to the "Package Import" feature. An attacker could possibly use this issue to perform arbitrary code execution. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. CVE-2024-25641 It was...

VulnCheck KEV: CVE-2024-29895

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the...

The vulnerability of the import_package() function (lib/import.php) in the Cacti network monitoring software allows a attacker to execute arbitrary PHP code.

The vulnerability of the importpackage function lib/import.php in the Cacti network monitoring software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary PHP code using a specially crafted XML file...

The vulnerability of the form_save() function (data_queries.php) in the Cacti network monitoring software allows a hacker to execute cross-site scripting attacks.

The vulnerability of the formsave function in the Cacti monitoring software’s dataqueries.php file is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

The vulnerability of the Cacti network monitoring software lies in the lack of security measures taken to protect the structure of the web page. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting using a specially crafted page...

The vulnerability of the automation_tree_rules_form_save() function in the Cacti network monitoring software allows a attacker to perform XSS attacks.

The vulnerability of the automationtreerulesformsave function in the Cacti network monitoring software automationtreerules.php is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

OPENSUSE-SU-2024:13203-1 cacti-1.2.25-2.1 on GA media

These are all security issues fixed in the cacti-1.2.25-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12016-1 cacti-1.2.20-1.1 on GA media

These are all security issues fixed in the cacti-1.2.20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13962-1 cacti-1.2.27-1.1 on GA media

These are all security issues fixed in the cacti-1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12593-1 cacti-1.2.23-1.1 on GA media

These are all security issues fixed in the cacti-1.2.23-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10084-1 cacti-0.8.8h-1.2 on GA media

These are all security issues fixed in the cacti-0.8.8h-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10670-1 cacti-1.2.18-1.2 on GA media

These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13533-1 cacti-1.2.26-1.1 on GA media

These are all security issues fixed in the cacti-1.2.26-1.1 package on the GA media of openSUSE Tumbleweed...

Metasploit Weekly Wrap-Up 06/14/2024

New module content 5 Telerik Report Server Auth Bypass Authors: SinSinology and Spencer McIntyre Type: Auxiliary Pull request: 19242 contributed by zeroSteiner Path: scanner/http/telerikreportserverauthbypass AttackerKB reference: CVE-2024-4358 Description: This adds an exploit for CVE-2024-4358...

Cacti Import Packages RCE

This exploit module leverages an arbitrary file write vulnerability CVE-2024-25641 in Cacti versions prior to 1.2.27 to achieve RCE. It abuses the Import Packages feature to upload a specially crafted package that embeds a PHP file. Cacti will extract this file to an accessible location. The modu...