23 matches found
day05-grafana-sqlexpr-lab
Jour 5 – Expressions SQL de Grafana → LFI DuckDB CVE-2024-9264 TL;DR: Sur les versions affectées de Grafana 11.x, un Viewer connecté peut utiliser les Expressions SQL. Grafana transmet l'expression à DuckDB sur le serveur. Avec readtext / readblob, vous pouvez lire des fichiers locaux LFI. Nous...
File-Read-CVE-2024-9264
File-Read-CVE-2024-9264 Grafana에서 파일 읽기를 위한 개념 증명 CVE-2024-9264 사전 요구사항 Viewer 권한 이상의 인증된 Grafana 사용자 DuckDB 바이너리가 설치되어 Grafana의 PATH를 통해 접근 가능해야 합니다 영향받는 버전 Grafana = v11.0.0 모든 v11.x.y가 영향을 받습니다 사용법 python3 poc.py --url --user --password --file 예시 python3 poc.py --url http://127.0.0.1:3000 --us...
CVE-2024-9264
CVE-2024-9264 python CVE-2024-9264.py '' -u '' -p '' -c ''...
CVE-2024-9264-in-Grafana-11.x
В этом репозитории нет README...
CVE-2024-9264
CVE-2024-9264 Document de référence https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. Résumé de la vulnérabilité Élément| Description ---|--- CVE| CVE-2024-9264 Cible| Grafana SQL Expressions Impact| Local File Inclusion LFI, Remote Code Execution RCE Sévérité| Critical CVSS...
grafana-CVE-2024-9264
grafana-CVE-2024-9264 Этот репозиторий содержит информацию об уязвимости CVE-2024-9264. Он также собирает уязвимую версию grafana, которую можно получить из ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0...
Exploit for Code Injection in Grafana
CVE-2024-9264 CVE-2024-9264 취약점 실습 보고서 1. 취약점 요약 | 항목...
CVE-2024-9264 vulnerabilities
Vulnerabilities for packages: grafana...
Exploit for Code Injection in Grafana
CVE-2024-9264 Authenticated RCE in Grafana v11.0 via SQL Exp...
Exploit for Code Injection in Grafana
CVE-2024-92...
SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2025:01991-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01991-1 advisory. grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: - Security issues fixed: CVE-2025-4123: Fix cross-site scriptin...
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: Security issues fixed: CVE-2025-4123: Fix cross-site scripting vulnerability bsc1243714. CVE-2025-22872: Bump golang.org/x/net/html bsc1241809 CVE-2025-3580: Prevent unauthorized...
Exploit for Code Injection in Grafana
🛠️ CVE-2024-9264 - Fixed Grafana RCE Exploit This is a fixe...
Exploit for Code Injection in Grafana
🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code...
Grafana Labs SQL expressions allowing for RCE (CVE-2024-9264)
The version of Grafana Labs installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-9264 advisory. - The SQL Expressions experimental feature of Grafana allows for the evaluation of 'duckdb' queries containing user input. These queries are insufficiently sanitize...
openSUSE Security Advisory (SUSE-SU-2024:3911-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
grafana-11.3.0-1.1 on GA media (moderate)
grafana-11.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14431-1 Rating: moderate Cross-References: CVE-2024-8118 CVE-2024-9264 CVSS scores: CVE-2024-8118 SUSE : 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVE-2024-9264 SUSE : 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H...
Palo Alto Expedition < 1.2.96 Multiple Vulnerabilties
Palo Alto Expedition versions before 1.2.96 suffer from multiple vulnerabilities: - An unauthenticated OS command Injection vulnerability through the /API/convertCSVtoParquet.php endpoint CVE-2024-9264 - An authenticated OS command injection vulnerability CVE-2024-9464 - An unauthenticated SQL...