How to list, create, update and delete Grafana dashboards via API

I have been a Splunk guy for quite some time, 4 years or so. I have made several blog posts describing how to work with Splunk in automated manner see in appendix. But after their decision to stop their business in Russia last year, including customer support and selling software and services, it...

PT-2020-13408 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.8 through 13.0.1 Description: A Stored Cross-Site Scripting issue allowed the execution of Javascript payloads on the Metrics Dashboard. Recommendations: For GitLab CE/EE versions 12.8 through 13.0.1, update to a...

Combodo iTop Cross-Site Scripting Vulnerability (CNVD-2020-35968)

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in the id of th...

CVE-2020-13890

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard...

Design/Logic Flaw

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard...

CVE-2020-13890

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard...

CVE-2020-13890

The CVE-2020-13890 entry concerns Neon theme 2.0 for Bootstrap, prior to 2020-06-03. The vulnerability is an XSS flaw in the dashboard Add Task Input operation, caused by insufficient validation of client-side data. Reported sources (NVD, CNVD, Red Hat advisory) describe the same issue and identi...

CVE-2020-11697

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

Cross site scripting

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

CVE-2020-11697

Combodo iTop is affected by a reflected XSS in dashboard IDs. The issue is fixed in all iTop packages for version 2.7.0, and in iTop essential and professional packages for version 2.6.4. Affected products and versions outside those ranges are not specified in the provided documents. Exploitation...

PT-2020-12784 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.0 iTop essential and iTop professional versions prior to 2.6.4 Description: The issue allows dashboard ids to be exploited with a reflective XSS payload. Recommendations: For versions prior to 2.7.0, update to versi...

Online Course Registration 1.0 SQL Injection

Exploit Title: Online Course Registration 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-06-05 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14251/online-course-registration.html Software Link:...

Online Course Registration 1.0 - Authentication Bypass

Exploit Title: Online Course Registration 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-06-05 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14251/online-course-registration.html Software Link:...

Mail.ru: Sidekiq Dashboard Publicly accessible at http://shopper.staging.instamart.ru/sidekiq/

Sideqiq dashboard was externally available on the http://shopper.staging.instamart.ru/ server in staging testing environment...

IBM Security Guardium Denial of Service Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A denial of service vulnerability exists in IBM Security Guardium. An...

CVE-2020-4307

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...

CVE-2020-4307

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...

Code injection

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...

CVE-2020-4307

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997...

CVE-2020-4307

CVE-2020-4307 affects IBM Security Guardium 11.1. The IBM bulletin documents an Improper Access Control vulnerability allowing an attacker on the same network to gain access to the Solr dashboard and cause a denial of service. CVSS base score 6.5 (Medium) with high impact on availability. A remed...