grafana-ssrf

grafana-ssrf Authenticated SSRF in Grafana. Notes Azure metadata header has been added to all SSRFS Google metadata header has been added to all SSRFS SSRF will not follow redirects no matter what so ensure url is direct. If login is via SSO or other none grafana logins please grab your session...

grafanaExp

grafanaExp A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability CVE-2021-43798, it can burst plugins / extract secretkey / decode datasource info automatic. Usage Automatic exploit with exp and local decode dbfile with decode. ➜ ./grafanaExp -h NAME: grafanaExp - Exploit...

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. ➜ ./grafanaExp -h NAME: grafanaExp -...

CVE-2025-70829

CVE-2025-70829: Information Exposure in Datart 中文文档 1. Vulnerability Overview CVE ID : CVE-2025-70829 Product : Datart Version : v1.0.0-rc.3 Vulnerability Type : Information Exposure An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive dat...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secretkey found in the defaults.i...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

ATTACKdatamap

ATTACKdatamap A datasource assessment on an event level to show potential coverage of the "MITRE ATT&CK" framework. This tool is developed by me and has no affiliation with "MITRE" nor with its great "ATT&CK" team, it is developed with the intention to ease the mapping of data sources to assess...

spark-python-ds-static

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-python-ds-static Write-up: https://abraxaslabs.tech/research/spark-python-ds-static spark-python-ds-static Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation...

CVE-2026-115785

An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite ZCS allows an ordinary authenticated user with account options enabled to inject CR/LF into the emailAddress inserted into an SMTP envelope command by a JSON SOAP request. After a...

EUVD-2026-109079

An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite ZCS allows an ordinary authenticated user with account options enabled to inject CR/LF into the emailAddress inserted into an SMTP envelope command by a JSON SOAP request. After a...

PT-2026-122107

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 10.1.16 Zimbra Collaboration Suite ZCS version 10.1.20 Description An SMTP command injection issue exists in the data-source testing functionality. An authenticated user with account options enabled can...

Apache OpenOffice < 4.1.17 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is prior to 4.1.17. It is, therefore, affected by multiple vulnerabilities: - A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary ev...

BIT-GRAFANA-2026-9703 Viewer role can create, modify and delete Loki alerting rules

Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana instance could send POST, PUT and DELETE requests through the proxy to the Loki rules API /loki/api/v1/rules, allowing...

BIT-GRAFANA-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

TYPO3: Coding.ms authorization issue vulnerability

TYPO3: There are authorization issues and vulnerabilities in versions prior to 6.0.0, 6.3.0, 5.0.0, 5.21.1, and 4.9.4. These vulnerabilities stem from an unvalidated data source for PayPal payment notifications. Any visitor to a website could override stored payment notifications for orders that...

SUSE CVE-2026-9703

Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana instance could send POST, PUT and DELETE requests through the proxy to the Loki rules API /loki/api/v1/rules, allowing...

Admidio authorization issue vulnerability

The Admidio versions from 5.0.11 to 5.0.16 have a vulnerability related to authorization. This vulnerability stems from improper access control in modules/inventory/inventorydata.php. Attackers who are already authenticated can bypass the restrictions of the inventorymoduleEnabled setting by maki...

Number Sea Wen Zhou Visual Drag-and-Drop Big Data Integration Platform Backend Authorization Vulnerability

The Noshai Wenzhou Visual Drag-and-Drop Big Data Integration Platform has an authorization issue in its backend. This vulnerability stems from insecure direct object references. Members of the workspace who are authenticated can access data sources in other workspaces by sending an external...

Number Sea Wen Zhou Visual Drag-and-Drop Big Data Integration Platform Backend Encryption Vulnerability

The backend commit efeacd3 and previous versions of the visual drag-and-drop big data integration platform have vulnerabilities related to encryption. This vulnerability stems from the use of a hardcoded public default AES key in the AesPasswordEncAndDecServiceImpl component. This allows...

Astra Linux – vulnerability in jackson-databind

FasterXML Jackson Databind 2.x prior to version 2.9.10.8 mishandles the interaction between serialization gadgets and typing, specifically related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...