Lucene search
+L

1391 matches found

Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.13 views

PT-2025-20886 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon web versions 24.10.3 through 24.10.4 Centreon web versions 24.04.09 through 24.04.10 Centreon web versions 23.10.19 through 23.10.21 Centreon web versions 23.04.24 through 23.04.26 Description: The issue is related to improper...

4.9CVSS6.4AI score0.0031EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.5 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. Centreon suffers from a security vulnerability that is exploited by attackers to cause elevation of...

4.9CVSS6.7AI score0.0031EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/26 10:13 a.m.22 views

CVE-2025-3872

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon centreon-web User configuration form modules allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its...

7.2CVSS7.5AI score0.00386EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/04/25 6:33 p.m.14 views

CVE-2025-3767

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

7.2CVSS7.4AI score0.00384EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 10:15 a.m.16 views

CVE-2025-3872

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon centreon-web User configuration form modules allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its...

7.2CVSS0.00386EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/24 9:19 a.m.59 views

CVE-2025-3872

CVE-2025-3872 is an SQL Injection vulnerability in Centreon centreon-web (User configuration form modules) that allows a high-privilege user to elevate to administrator by tampering the contact form payload. The issue affects Centreon Web versions listed by PT-Security (22.10.0–27, 23.04.0–23.04....

7.2CVSS7.3AI score0.00386EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/24 9:19 a.m.8 views

CVE-2025-3872 Privilege escalation by altering payload in contact form

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon centreon-web User configuration form modules allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its...

7.2CVSS7.5AI score0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/24 9:19 a.m.41 views

CVE-2025-3872 Privilege escalation by altering payload in contact form

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon centreon-web User configuration form modules allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its...

7.2CVSS0.00386EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/24 9:19 a.m.15 views

CVE-2025-3872 Privilege escalation by altering payload in contact form

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon centreon-web User configuration form modules allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its...

7.2CVSS7.2AI score0.00386EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.12 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. Centreon suffers from a security vulnerability that originates from SQL injection and could lead to...

7.2CVSS7.4AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.12 views

PT-2025-17722 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon centreon-web versions 22.10.0 through 22.10.27 Centreon centreon-web versions 23.04.0 through 23.04.24 Centreon centreon-web versions 23.10.0 through 23.10.19 Centreon centreon-web versions 24.04.0 through 24.04.9 Centreon centreon-w...

7.2CVSS7.3AI score0.00386EPSS
SaveExploits0References10
NVD
NVD
added 2025/04/22 4:15 p.m.14 views

CVE-2025-3767

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

7.2CVSS0.00384EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/22 3:16 p.m.64 views

CVE-2025-3767

CVE-2025-3767 is an SQL Injection in Centreon BAM’s Boolean KPI Listing modules caused by improper neutralization of special elements in SQL commands. Affected: Centreon BAM versions 24.10 (before 24.10.1), 24.04 (before 24.04.5), 23.10 (before 23.10.10), and 23.04 (before 23.04.10). Root cause: ...

7.2CVSS7.6AI score0.00384EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/22 3:16 p.m.9 views

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

7.2CVSS7.6AI score0.00384EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/22 3:16 p.m.19 views

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

7.2CVSS0.00384EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/22 3:16 p.m.8 views

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

7.2CVSS7.1AI score0.00384EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.4 views

Centreon BAM 安全漏洞

Centreon BAM is a monitoring module from Centreon France. A security vulnerability exists in Centreon BAM versions prior to 24.10.1 that stems from improper neutralization of special elements in SQL commands, which could lead to an SQL injection attack...

7.2CVSS7.5AI score0.00384EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.7 views

PT-2025-17547 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon BAM versions 23.04 through 23.04.9 Centreon BAM versions 23.10 through 23.10.9 Centreon BAM versions 24.04 through 24.04.4 Centreon BAM versions 24.10 through 24.10.0 Description: The issue is related to an SQL Injection vulnerabilit...

7.2CVSS7.2AI score0.00384EPSS
SaveExploits0References8
Exploit DB
Exploit DB
added 2025/04/10 12:0 a.m.170 views

Centron 19.04 - Remote Code Execution (RCE)

Exploit Title : Centron 19.04 - Remote Code Execution RCE Tested on Centreon API 19.04.0 Centreon 19.04 - Login Password Bruteforcer Written on 6 Nov 2019 Referencing API Authentication of the Centreon API document Author: st4rry centbruteon.py Centreon Download Link:...

9CVSS8AI score0.32156EPSS
SaveExploits7
Packet Storm News
Packet Storm News
added 2025/04/10 12:0 a.m.6 views

Centreon API 19.04 Bruteforcer

Centreon version 19.04 login password bruteforcing tool...

7.2AI score
SaveExploits0
Rows per page
Query Builder