23 matches found
CVE-2024-9264
CVE-2024-9264 root@kitploit: python CVE-2024-9264.py '' -u '' -p '' -c ''...
grafana-CVE-2024-9264
grafana-CVE-2024-9264 Questo repository contiene dettagli su CVE-2024-9264. Costruisce anche una versione vulnerabile di grafana, che può essere scaricata da ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0...
File-Read-CVE-2024-9264
File-Read-CVE-2024-9264 Preuve de concept pour la lecture de fichier dans Grafana CVE-2024-9264 Prérequis utilisateur Grafana authentifié avec des permissions Viewer ou supérieures Le binaire DuckDB doit être installé et accessible via le PATH de Grafana Version impactée Grafana = v11.0.0 toutes...
CVE-2024-9264
CVE-2024-9264 Documento de referência https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. Resumo da vulnerabilidade...
day05-grafana-sqlexpr-lab
Dia 5 – Expressões SQL do Grafana → DuckDB LFI CVE-2024-9264 Resumo: Em builds afetados do Grafana 11.x, um Visualizador logado pode usar Expressões SQL. O Grafana encaminha a expressão para o DuckDB no servidor. Com readtext / readblob, você pode ler arquivos locais LFI. Nós plantamos uma flag e...
CVE-2024-9264-in-Grafana-11.x
Questo repository non contiene un README...
Exploit for Code Injection in Grafana
CVE-2024-9264 CVE-2024-9264 취약점 실습 보고서 1. 취약점 요약 | 항목...
CVE-2024-9264 vulnerabilities
Vulnerabilities for packages: grafana...
Exploit for Code Injection in Grafana
CVE-2024-9264 Authenticated RCE in Grafana v11.0 via SQL Exp...
Exploit for Code Injection in Grafana
CVE-2024-92...
SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2025:01991-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01991-1 advisory. grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: - Security issues fixed: CVE-2025-4123: Fix cross-site scriptin...
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: Security issues fixed: CVE-2025-4123: Fix cross-site scripting vulnerability bsc1243714. CVE-2025-22872: Bump golang.org/x/net/html bsc1241809 CVE-2025-3580: Prevent unauthorized...
Exploit for Code Injection in Grafana
🛠️ CVE-2024-9264 - Fixed Grafana RCE Exploit This is a fixe...
Exploit for Code Injection in Grafana
🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code...
Grafana Labs SQL expressions allowing for RCE (CVE-2024-9264)
The version of Grafana Labs installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-9264 advisory. - The SQL Expressions experimental feature of Grafana allows for the evaluation of 'duckdb' queries containing user input. These queries are insufficiently sanitize...
openSUSE Security Advisory (SUSE-SU-2024:3911-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
grafana-11.3.0-1.1 on GA media (moderate)
grafana-11.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14431-1 Rating: moderate Cross-References: CVE-2024-8118 CVE-2024-9264 CVSS scores: CVE-2024-8118 SUSE : 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVE-2024-9264 SUSE : 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H...
Palo Alto Expedition < 1.2.96 Multiple Vulnerabilties
Palo Alto Expedition versions before 1.2.96 suffer from multiple vulnerabilities: - An unauthenticated OS command Injection vulnerability through the /API/convertCSVtoParquet.php endpoint CVE-2024-9264 - An authenticated OS command injection vulnerability CVE-2024-9464 - An unauthenticated SQL...