Pandora Fms - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Pandora FMS Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in Pandora FMS 5.0RC1 and lower. It...

Pandora Fms 5.0RC1 - Remote Command Injection

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/ ------------------------- Product description:...

Pandora Fms 5.0RC1 - Remote Command Injection

Pandora Fms 5.0RC1 - Remote Command Injection ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/...

Pandora FMS Default Credential / SQLi Remote Code Execution

This module attempts to exploit multiple issues in order to gain remote code execution under Pandora FMS version use exploit/linux/http/pandora/fmssqli msf undefinedfmssqli show actions ...actions... msf undefinedfmssqli set ACTION msf undefinedfmssqli show options ...show and set options... msf...

Pandora FMS 5.0RC1 Code Execution Vulnerability

Pandora FMS versions 5.0RC1 and below suffer from a code execution vulnerability. ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/...

Pandora FMS < 5.0 RCE Vulnerability - Active Check

Pandora FMS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Pandora FMS 5.0RC1 Code Execution

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/ ------------------------- Product description:...

Pandora FMS Remote Code Execution

This module exploits a vulnerability found in Pandora FMS 5.0RC1 and lower. It will leverage an unauthenticated command injection in the Anyterm service on port 8023/TCP. Commands are executed as the user "pandora". In Pandora FMS 4.1 and 5.0RC1 the user "artica" is not assigned a password by...

Threat Outbreak Alert: Fake FMS Notification Attachment Email Messages on January 13, 2014

Medium Alert ID: 32413 First Published: 2014 January 14 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a Department of the Treasury Financial Management Service FMS notification for the recipient. The text in the...

[Aircrack-ng 1.2 Beta 1] 802.11 WEP and WPA-PSK keys cracking tool

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared ...

Pandora FMS v4.0.1 - Local File Include Vulnerability + VD Session

Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source software. It watches your systems and...

Pandora FMS 4.0.1 - 'sec2' Local File Inclusion

source: https://www.securityfocus.com/bid/52058/info Pandora FMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Th...

Pandora Fms 4.0.1 - Local File Inclusion

Pandora Fms 4.0.1 - Local File Inclusion Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source...

Pandora FMS 4.0.1 - sec2 Local File Inclusion

Pandora FMS 4.0.1 - sec2 Local File Inclusion source: https://www.securityfocus.com/bid/52058/info Pandora FMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scrip...

Pandora Fms 4.0.1 - Local File Inclusion

Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source software. It watches your systems and...

Pandora FMS v4.0.1 - Local Path Include Vulnerability

Document Title: =============== Pandora FMS v4.0.1 - Local Path Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=435 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 435...

Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

Pandora FMS v4.0.1 - Local Path Include Vulnerability

Document Title: =============== Pandora FMS v4.0.1 - Local Path Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=435 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 435...

Pandora FMS 'index.php' Cross Site Scripting Vulnerability

Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...