CVE-2017-15934

Artica Pandora FMS 7.0 is affected by a stored Cross-Site Scripting vulnerability in the map name parameter. According to CNVD-2017-36182, remote attackers can inject arbitrary script/HTML via the map name, enabling stored XSS. The CVE entry confirms a stored XSS issue but does not provide exploi...

PT-2017-14293

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue concerns stored Cross-Site Scripting in the map name parameter. Recommendations For Artica Pandora FMS version 7.0, update to a version that fixes this issue. At the moment, there is no...

PT-2017-14295

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows an attacker with write permission to create an agent containing an XSS payload. When a user accesses the agent definitions page, the malicious script is executed. Recommendations For...

PT-2017-14294

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows for remote PHP code execution through the manager files function. This can only be exploited by administrators who upload a PHP file. Recommendations For Artica Pandora FMS version 7....

PT-2017-14296

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows the leakage of a full installation pathname through GET data when the main page's graph requisition is intercepted. This also results in the disclosure of general OS information, as...

CVE-2017-15937: Exposure of Sensitive Information to an Unauthorized Actor

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...

CVE-2017-15935: Improper Control of Generation of Code

Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file...

CVE-2017-15934: Improper Neutralization of Input During Web Page Generation

Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter...

CVE-2017-15936: Improper Neutralization of Input During Web Page Generation

In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed...

Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String

Exploit for multiple platform in category remote exploits !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based...

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following...

Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String

!/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based Exploiting string located on the heap - Blind Attack No output...

Aircrack-ng 1.2 RC 3 - WEP and WPA-PSK Keys Cracking Program

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other...

Pandora FMS 5.0 - 5.1 Authentication Bypass Vulnerability

Pandora FMS is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:artica:pandorafms...

Pandora FMS 5.0, 5.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu |...

Pandora FMS 5.05.1 - Authentication Bypass

Pandora FMS 5.05.1 - Authentication Bypass Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu | mmancera at...

Pandora FMS 5.0 / 5.1 Authentication Bypass

================================================================ Authentication Bypass in Pandora FMS ================================================================ Information -------------------- Name: Pandora FMS - Authentication Bypass Affected Software : Pandora FMS Affected Versions: 5.0,...

Pandora FMS 5.0/5.1 - Authentication Bypass

Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu | mmancera at a2secure dot com Vendor Homepage:...

Aircrack-ng 1.2 RC 2 - WEP and WPA-PSK keys cracking program

Here is the second release candidate. Along with a LOT of fixes, it improves the support for the Airodump-ng scan visualizer. Airmon-zc is mature and is now renamed to Airmon-ng. Also, Airtun-ng is now able to encrypt and decrypt WPA on top of WEP. Another big change is recent version of GPSd now...

Pandora FMS 5.1 SP1 - SQL Injection Vulnerability

Pandora FMS version 5.1 SP1 suffers from a remote SQL injection vulnerability. Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability Product & Service Introduction: =============================== Pandora FMS is a monitoring Open Source software. It watches your...